Unscored CVE-2022-25223 EUVD-2022-29922GHSA-2x5v-pj5c-wjvp

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_detai…

Published Mar 23, 2022 · Updated Aug 3, 2024 · Assigned by Fluid Attacks

Description

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_details' via the 'id' parameter.

Affected products

Vendor	Product	Affected	Fixed
—	Money Transfer Management System	1.0	—

References

https://fluidattacks.com/advisories/jagger/