CVE-2022-23363

CVE-2022-23363 relates to an SQL injection vulnerability in Online Banking System v1.0 that is reachable via index.php. The core issue identified across multiple connected sources is unauthenticated, network-proximal SQL injection affecting the application, with impacts described in the CVE metri...

CVE-2022-25494

CVE-2022-25494 affects Online Banking System v1.0, with a confirmed SQL injection vulnerability in staff_login.php. The connected documents consistently describe the issue as a SQL injection in that file; no explicit remediation, patch version, or exploit details are provided within the supplied ...

CVE-2022-28116

CVE-2022-28116 affects Online Banking System v1.0. The issue is a SQL injection via the id parameter, described in the CVE entry. CVSS v3.1 reports a base score of 9.8 (CRITICAL) with network attack, no privileges, and no user interaction required, impacting confidentiality, integrity, and availa...

CVE-2022-27991

CVE-2022-27991 affects the Online Banking System in PHP v1. The connected documents confirm multiple SQL injection vulnerabilities in the /staff_login.php endpoint, exploitable through the Staff ID and Staff Password parameters. The root cause is improper handling/validation of input used in SQL ...

CVE-2022-40120

CVE-2022-40120 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search_term parameter of /net-banking/customer_transactions.php. Root cause: unsanitized input used in SQL queries. Impact (per CVSS v3.1): Confidentiality HIGH, Integrity HIGH, Availability HIGH (score...

CVE-2022-40122

CVE-2022-40122 affects Online Banking System v1.0. A SQL injection vulnerability exists in the cust_id parameter of /net-banking/edit_customer_action.php (SQLi via cust_id). The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact ...

CVE-2022-40115

CVE-2022-40115 affects Online Banking System v1.0, with a SQL injection vulnerability in /net-banking/delete_beneficiary.php via the cust_id parameter. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8; CRITICAL). Exploitation requires network access, no user interaction...

CVE-2022-40117

CVE-2022-40117 affects Online Banking System v1.0, with a SQL injection in the cust_id parameter of /net-banking/delete_customer.php. Root cause: unsafe SQL handling in PHP/MySQL leads to potential unauthorized data access/modification. Impact per metrics: base CVSS 3.1 score 9.8 (CRITICAL); atta...

CVE-2022-40121

CVE-2022-40121 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search parameter of /net-banking/manage_customers.php. This aligns with the CVSS/impact data shown (AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H) giving a base score of 9.8 (CRITICAL). The connected PT-20...

CVE-2022-40113

CVE-2022-40113 affects Online Banking System v1.0. A SQL injection vul nerability exists in the cust_id parameter of /net-banking/send_funds.php, caused by unsafeguarded input leading to data access compromise. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges, n...

CVE-2022-40119

Online Banking System v1.0 contains an SQL injection vulnerability in the search_term parameter of /net-banking/transactions.php. The underlying issue is unsanitized user input leading to potential disclosure/integrity/availability impact (CVSS v3.1 base score 9.8, CRITICAL). Exploitation details...

CVE-2022-40114

CVE-2022-40114 : Online Banking System v1.0 contains a SQL injection in the cust_id parameter of /net-banking/edit_customer.php. Root cause: unsanitized input in the parameter leads to arbitrary SQL execution. Impact per CVSS: Confidentiality, Integrity, and Availability all HIGH. Exploitation de...

CVE-2022-40116

CVE-2022-40116 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search parameter of /net-banking/beneficiary.php, arising from improper input handling. CVSSv3.1 indicates NETWORK attack vector, no authentication, with 0 user interaction and high impacts to confident...

CVE-2022-40118

Online Banking System v1.0 contains an SQL injection vulnerability in /net-banking/send_funds_action.php via the cust_id parameter. Root cause: unsanitized input enabling SQL injection. Impact per CVSS: base score 9.8 (CRITICAL); AttackVector NETWORK; AttackComplexity LOW; PrivilegesRequired NONE...