cve/2022/CVE-2022-40115.md

CVE-2022-40115

Description

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php.

POC

Reference

• https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection1.md
• https://github.com/zakee94/online-banking-system/issues/10

Github

No PoCs found on GitHub currently.