3 matches found
CVE-2022-25223
Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/viewdetails' via the 'id' parameter...
PT-2022-17162
Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue allows an authenticated user to inject SQL queries in the "mtms/admin/?page=transaction/view details" endpoint via the id parameter. Recommendations For Money Transfer Manageme...
Money Transfer Management System SQL注入漏洞
Money Transfer Management System is a remittance management system. version 1.0 of Money Transfer Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of mtms/admin/?page=transaction/viewdetails. An attacker...