CVE-2022-25221

概要

参考情報

• fluidattacks.com/advisories/charles · Exploit

money transfer management system のその他の脆弱性

• CVE-2021-44582高 8.8A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to …
• CVE-2022-29746緊急 9.8Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
• CVE-2022-29745緊急 9.8Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.
• CVE-2022-29741緊急 9.8Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.
• CVE-2022-29739緊急 9.8Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.