CVE-2022-1083

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1082

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1083

The CVE-2022-1083 entry affects Microfinance Management System and is supported by multiple connected records describing a SQL injection vulnerability. The root cause is lack of validation/escaping for external input in parameters: customer_type_number, account_number, account_status_number, and ...

CVE-2022-1083 Microfinance Management System sql injection

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1083 Microfinance Management System sql injection

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1082

CVE-2022-1082 affects SourceCodester Microfinance Management System 1.0, specifically the login page file /mims/login.php. The vulnerability is a SQL injection caused by manipulation of the username/password input using the payload '||1=1#', which may be exploited remotely. The issue has been des...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1081

The CVE-2022-1081 entry concerns SourceCodester Microfinance Management System 1.0. A cross-site scripting vulnerability exists in /mims/app/addcustomerHandler.php, caused by improper handling of first_name, middle_name, and surname inputs. The issue allows remote initiation of an XSS attack, wit...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

Microfinance Management System 1.0 SQL Injection Vulnerability

Microfinance Management System version suffers from multiple remote SQL injection vulnerabilities including one that allows for authentication bypass. Original discovery of SQL injection in this version is attributed to Hejap Zairy in March of 2022. Exploit Title: Microfinance Management System 1...

SourceCodester Microfinance Management System 跨站脚本漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Microfinance Management System version 1.0, which stems from The program lacks data validation filters for user-supplied data and output, which can...

Microfinance Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance Management System...

SourceCodester Microfinance Management System SQL注入漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Microfinance Management System version 1.0, which SourceCodester Microfinance Management System version 1.0 is vulnerable to SQL injection...

SourceCodester Microfinance Management SystemSQL注入漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Microfinance Management System version 1.0, which The vulnerability originates from the lack of validation of external input SQL statements for the...

Microfinance Management System 1.0 Cross Site Scripting

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance...

Microfinance Management System 1.0 SQL Injection

Exploit Title: Microfinance Management System 1.0 - Authentication Bypass SQL Injection Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance Managemen...

hungarian-microfinance.hu Cross Site Scripting vulnerability OBB-1344127

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

european-microfinance.org XSS vulnerability

Open Bug Bounty ID: OBB-258962 Description| Value ---|--- Affected Website:| european-microfinance.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...