CVE-2022-27991

MEDIUM

Online Banking System in PHP v1 - SQL Injection via Staff ID and Staff Password Parameters

Title source: llm

Description

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/D4rkP0w4r/CVEs/blob/main/Online-Banking_SQLI/POC.md

Scores

CVSS v3 6.5

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-89

Status published

Products (1)

online_banking_system_project/online_banking_system 1.0

Published Apr 08, 2022

Tracked Since Feb 18, 2026