Money Transfer Management System Project

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Money Transfer Management System Project records in CISA KEV

No Money Transfer Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Money Transfer Management System 9 records MEDIUM

Records

9 records

TI-2022-08935 CVE-2022-25222 · GHSA-w57f-vqp2-mw79

SQL injection in Money Transfer Management System

MEDIUM 45

Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage_branch.php' and 'admin/maintenance/manage_fee.php' via the 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0164 Published 2022-03-23 No fix listed CWE-89

TI-2022-12134 CVE-2022-29746 · GHSA-34jv-w46c-36jr

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.

MEDIUM 44

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12133 CVE-2022-29745 · GHSA-643r-r43r-r6wj

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.

MEDIUM 44

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12132 CVE-2022-29741 · GHSA-6qf4-hfvh-m8h3

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.

MEDIUM 44

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12131 CVE-2022-29739 · GHSA-6q35-w9ch-qw9h

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.

MEDIUM 44

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12130 CVE-2022-29738 · GHSA-gm84-fhcx-mjmw

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.

MEDIUM 44

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2021-20156 CVE-2021-44582 · GHSA-m62q-gfwg-6w9f

A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management…

MEDIUM 41

A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0146 Published 2022-06-10 No fix listed CWE-425

TI-2022-08934 CVE-2022-25221 · GHSA-j8pc-j426-mj2v

Cross-site scripting in Money Transfer Management System

LOW 28

Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the link in order to execute JavaScript code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00702 Published 2022-03-23 No fix listed CWE-79

TI-2022-08936 CVE-2022-25223 · GHSA-2x5v-pj5c-wjvp

SQL injection in Money Transfer Management System

LOW 21

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_details' via the 'id' parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00783 Published 2022-03-23 No fix listed CWE-89

Open these records in search →