Vulnerabilities > Money Transfer Management System Project > Money Transfer Management System > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-23	CVE-2022-25221	Cross-site Scripting vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the link in order to execute JavaScript code. network low complexity money-transfer-management-system-project CWE-79	6.1
2022-03-23	CVE-2022-25223	SQL Injection vulnerability in Money Transfer Management System Project Money Transfer Management System 1.0 Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_details' via the 'id' parameter. network low complexity money-transfer-management-system-project CWE-89	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.