CVE-2023-5695

CodeAstro Internet Banking System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the pages_reset_pwd.php file. The issue arises from manipulating the email parameter with crafted input (e.g., testing%40example.com'%26%25alert(9860)), which can be exploited remotely. The vulnerab...

CVE-2023-5695 CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...

CVE-2023-5694 CodeAstro Internet Banking System pages_system_settings.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input alert991 leads to cross site scripting. It is possible to launch...

CVE-2023-5694 CodeAstro Internet Banking System pages_system_settings.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input alert991 leads to cross site scripting. It is possible to launch...

CVE-2023-5694

The CVE-2023-5694 entry affects CodeAstro Internet Banking System 1.0. Affected is an unknown function in pages_system_settings.php where manipulating the sys_name parameter (example input containing script tags) results in cross-site scripting. Exploitation is possible remotely, and an exploit h...

CVE-2023-5693 CodeAstro Internet Banking System pages_reset_pwd.php sql injection

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-5693 CodeAstro Internet Banking System pages_reset_pwd.php sql injection

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-5693

Summary: CVE-2023-5693 concerns CodeAstro Internet Banking System 1.0, where the parameter email in the file pages_reset_pwd.php enables SQL injection. The issue is remotely exploitable and, per sources, the exploit has been disclosed publicly. Affected software: CodeAstro Internet Banking System...

PT-2023-32266 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A critical issue affects the processing of the file pages reset pwd.php, where the manipulation of the email argument leads to sql injection. The attack can be initiated remotely...

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter email in the file pagesresetpwd.php...

PT-2023-32272 · Codeastro · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic issue has been found in the CodeAstro Internet Banking System, affecting the processing of the file pages view client.php. The manipulation of the acc name argument with...

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter accname in the file pagesviewclient.php...

PT-2023-32268 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A cross-site scripting issue was found in the CodeAstro Internet Banking System, affecting an unknown functionality of the file pages reset pwd.php. The manipulation of the email...

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter accountnumber in the file...

Main phishing and scamming trends and techniques

There are two main types of online fraud aimed at stealing user data and money: phishing and scams. Phishers primarily seek to extract confidential information from victims, such as credentials or bank card details, while scammers deploy social engineering to persuade targets to transfer money on...

360 Security Browser suffers from dll hijacking vulnerability

360 Safe Browser adopts advanced malicious URL blocking technology, which can automatically block malicious URLs such as piracy, fraud, and Internet banking imitation. 360 Secure Browser has a dll hijacking vulnerability, which can be exploited by attackers to cause the user's computer to be...

Crooks Tap Google Firebase in Fresh Phishing Tactic

A series of phishing campaigns using Google Firebase storage URLs have surfaced, showing that cybercriminals continue to leverage the reputation of Google’s cloud infrastructure to dupe victims and skate by secure email gateways. Google Firebase is a mobile and web application development platfor...

Threat Outbreak Alert RuleID27142: Email Messages Distributing Malicious Software on January 13, 2017

Medium Alert ID: 52325 First Published: 2017 January 13 17:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27142 may contain the following files: Name |...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

Threat Outbreak Alert: Fake Internet Banking Security Upgrade Notice Email Messages on March 18, 2014

Medium Alert ID: 33398 First Published: 2014 March 18 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a new security program for the recipient. The text in the email message attempts to convince th...