2 matches found
CVE-2022-25222: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/managebranch.php' and 'admin/maintenance/managefee.php' via the 'id' parameter...
9.8CVSS8.2AI score0.0164EPSS
SaveExploits1References2
Money Transfer Management System SQL注入漏洞
A SQL injection vulnerability exists in Money Transfer Management System version 1.0, a money transfer management system. The vulnerability stems from missing validation of external input SQL statements in the id parameter in admin/maintenance/managebranch.php and admin/maintenance/managefee.php...
9.8CVSS6.1AI score0.0164EPSS
SaveExploits1References2
20