Vulnerabilities > Money Transfer Management System Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-06-10 | CVE-2021-44582 | Forced Browsing vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL. | 6.5 |
| 2022-05-12 | CVE-2022-29738 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id. | 7.5 |
| 2022-05-12 | CVE-2022-29739 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=. | 7.5 |
| 2022-05-12 | CVE-2022-29741 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee. | 7.5 |
| 2022-05-12 | CVE-2022-29745 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction. | 7.5 |
| 2022-05-12 | CVE-2022-29746 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete. | 7.5 |
| 2022-03-23 | CVE-2022-25221 | Cross-site Scripting vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the link in order to execute JavaScript code. | 4.3 |
| 2022-03-23 | CVE-2022-25222 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage_branch.php' and 'admin/maintenance/manage_fee.php' via the 'id' parameter. | 7.5 |
| 2022-03-23 | CVE-2022-25223 | SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_details' via the 'id' parameter. | 4.0 |