Internet Banking System vulnerabilities
4 known vulnerabilities in Internet Banking System from CodeAstro. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Internet Banking System: Unrestricted Upload of File with Dangerous Type
A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_view_client.php.
- 7.3 High severity
Internet Banking System: Cross-Site Request Forgery
A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settin
- 9.8 Critical severity
Internet Banking System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pages_account.php of the component Profile Picture Handler. The manipulation leads to unres
- 9.8 Critical severity
Internet Banking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiate