PT-2022-14847

Name of the Vulnerable Software and Affected Versions SourceCodester Bank Management System version 1.0 Description A critical issue has been found in the login functionality. The manipulation of the password argument with a specific input leads to SQL injection. The attack can be launched...

CVE-2022-2086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

CVE-2022-2087: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The manipulation of the argument notice with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...