6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. The affected element is an unknown function of the file /bank/mnotice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Basic Information
ID
CVE-2025-9305
Source
VulDB
Published
Aug 21, 2025 at 15:02
Affected Product
Vendor
SourceCodester
Product
Online Bank Management System
Version
1.0
Affected Versions
SourceCodester Online Bank Management System 1.0