CVE-2022-27927

CVE-2022-27927 affects Microfinance Management System 1.0 in which SQL injection is possible when MySQL is used as the application database. The vulnerable inputs are the course_code and/or customer_number parameters, through which an attacker can issue arbitrary SQL commands to the backend datab...

Microfinance Management System 1.0 Cross Site Scripting

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance...