CVE-2022-1082

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1081

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1083

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1081

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1083 Microfinance Management System sql injection

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1083 Microfinance Management System sql injection

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customertypenumber/accountnumber/accountstatusnumber/accounttypenumber with the input ' and select fromselectsleep10Avx and 'abc' = 'abc leads to sql injection in multiple...

CVE-2022-1083

The CVE-2022-1083 entry affects Microfinance Management System and is supported by multiple connected records describing a SQL injection vulnerability. The root cause is lack of validation/escaping for external input in parameters: customer_type_number, account_number, account_status_number, and ...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082

CVE-2022-1082 affects SourceCodester Microfinance Management System 1.0, specifically the login page file /mims/login.php. The vulnerability is a SQL injection caused by manipulation of the username/password input using the payload '||1=1#', which may be exploited remotely. The issue has been des...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1081

The CVE-2022-1081 entry concerns SourceCodester Microfinance Management System 1.0. A cross-site scripting vulnerability exists in /mims/app/addcustomerHandler.php, caused by improper handling of first_name, middle_name, and surname inputs. The issue allows remote initiation of an XSS attack, wit...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

SourceCodester Microfinance Management System SQL注入漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Microfinance Management System version 1.0, which SourceCodester Microfinance Management System version 1.0 is vulnerable to SQL injection...

Microfinance Management System 1.0 SQL Injection Vulnerability

Microfinance Management System version suffers from multiple remote SQL injection vulnerabilities including one that allows for authentication bypass. Original discovery of SQL injection in this version is attributed to Hejap Zairy in March of 2022. Exploit Title: Microfinance Management System 1...

Microfinance Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance Management System...

CVE-2022-1081: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

SourceCodester Microfinance Management SystemSQL注入漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Microfinance Management System version 1.0, which The vulnerability originates from the lack of validation of external input SQL statements for the...

PT-2022-13645

Name of the Vulnerable Software and Affected Versions Microfinance Management System affected versions not specified Description A critical issue has been discovered, allowing for SQL injection through the manipulation of arguments such as customer type number, account number, account status...