CVE-2022-40118

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_action.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-23

Last modified

2025-05-22

Weaknesses

CWE-89

Affected products

• Online Banking System (Online Banking System Project)

References

• https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection4.md
• https://github.com/zakee94/online-banking-system/issues/19