Description
A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | ATM Banking | 1.0 | — |
References
- VDB-306402 | code-projects ATM Banking moneyWithdraw logic error vdb-entry technical-description
- VDB-306402 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #559303 | ATM Simulator Improper Input Validation in Financial Transactions v1 Improper Input Validation third-party-advisory
- https://github.com/zzzxc643/cve/blob/main/ATM_Banking.md exploit
- https://code-projects.org/ product