Banking System (Oretnom23) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-12-08. Vendor: Oretnom23.

CVEs of Banking System

• CVE-2025-14221 - CVSS 5.4 (medium), 2025-12-08: A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the…
• CVE-2022-26644 - CVSS 6.1 (medium), 2022-03-30: Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info…
• CVE-2022-26646 - CVSS 9.8 (critical), 2022-03-30: Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter.
• CVE-2022-26645 - CVSS 9.8 (critical), 2022-03-30: A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded…
• CVE-2021-41659 - CVSS 9.8 (critical), 2022-01-24: SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password…