PatchTheCVEonline banking system vulnerabilities and fixes
Recent CVEs affecting online banking system, with upgrade or downgrade steps. 14 tracked.
Also searched as: onlinebankingsystem.
online banking system has 14 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-23. Highest priority: CVE-2022-28116 (score 62/100).
- CVE-2022-40122 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-40121 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at
- CVE-2022-40120 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term paramet
- CVE-2022-40119 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term paramet
- CVE-2022-40118 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-40117 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-40116 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at
- CVE-2022-40115 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-40114 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-40113 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter a
- CVE-2022-28116 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
- CVE-2022-27991 MEDIUM 6.5 DOWNGRADE Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_log
- CVE-2022-25494 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php.
- CVE-2022-23363 CRITICAL 9.8 DOWNGRADE Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
FAQ
How do I fix online banking system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is online banking system being exploited right now?
None of the tracked online banking system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which online banking system CVE should I patch first?
CVE-2022-28116 currently ranks highest (62/100): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter..