PT-2025-34741 · Sourcecodester · Online Bank Management System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
SourceCodester Online Bank Management System version 1.0
Description:
A security issue exists in SourceCodester Online Bank Management System 1.0. The vulnerability is located in the
/feedback.php file, within an unknown function. Manipulation of the msg argument can lead to SQL injection. The exploit has been publicly disclosed and may be used for remote attacks.Recommendations:
As a temporary workaround, consider restricting access to the
/feedback.php file until a patch is available.
Sanitize the msg argument to prevent SQL injection attacks.Exploit
Fix
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Online Bank Management System