CVE-2023-5693

Summary: CVE-2023-5693 concerns CodeAstro Internet Banking System 1.0, where the parameter email in the file pages_reset_pwd.php enables SQL injection. The issue is remotely exploitable and, per sources, the exploit has been disclosed publicly. Affected software: CodeAstro Internet Banking System...

CVE-2023-5698

CVE-2023-5698 affects CodeAstro Internet Banking System 1.0, specifically the file pages_deposit_money.php. The vulnerability stems from a cross-site scripting (XSS) issue caused by manipulating the account_number parameter, demonstrated with input like 421873905-->alert(9523)

CVE-2023-5694

The CVE-2023-5694 entry affects CodeAstro Internet Banking System 1.0. Affected is an unknown function in pages_system_settings.php where manipulating the sys_name parameter (example input containing script tags) results in cross-site scripting. Exploitation is possible remotely, and an exploit h...

CVE-2023-5695

CodeAstro Internet Banking System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the pages_reset_pwd.php file. The issue arises from manipulating the email parameter with crafted input (e.g., testing%40example.com'%26%25alert(9860)), which can be exploited remotely. The vulnerab...

CVE-2023-5696

CVE-2023-5696 affects CodeAstro Internet Banking System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the page_pages_transfer_money.php function, exploitable via manipulation of the account_number parameter (example input: 357146928-->alert(9206)

CVE-2023-5697

CVE-2023-5697 affects CodeAstro Internet Banking System 1.0, specifically the file pages_withdraw_money.php. The vulnerability arises from manipulating the argument account_number (example input: 287359614-->alert(1234)

CVE-2023-5699

CVE-2023-5699 : CodeAstro Internet Banking System 1.0 contains a cross-site scripting (XSS) issue in the pages_view_client.php file. The vulnerability arises from unsafely handling the acc_name parameter, where crafted input (e.g., Johnnie Reyes'"()&%) can lead to script execution in a victim’s b...

CVE-2024-0781

CVE-2024-0781 affects CodeAstro Internet Banking System 1.0, specifically an vulnerability in the pages_client_signup.php file where manipulating the Client Full Name parameter can trigger an open redirect. The issue is exploitable remotely and has been publicly disclosed (VDB-251697). Several co...