CNNVD-202510-3613 Information

CNNVD ID

CNNVD-202510-3613

CVE-2025-12244

  • CNNVD Published: 2025-10-27

Description (Chinese)

Code-Projects Simple E-Banking System是Code-Projects的一个简易电子银行系统。 Code-Projects Simple E-Banking System 1.0版本存在代码注入漏洞,该漏洞源于对文件/eBank/register.php中参数Username的错误操作,可能导致跨站脚本攻击。

Description (English)

Code-Projects Simple E-Banking Systems is a simple electronic banking system for Code-Projects. The Code-Projects Simple E-Banking System Version 1.0 contains a code-injection loophole that results from an error in the use of the parameter Username in the file/eBank/register.php, which may result in a cross-site script attack.

Hazard Level

High

Vulnerability Type

代码注入

Affected Vendor

Code-Projects

Published

2025-10-27

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/asd1238525/cve/blob/main/xss5.md https://vuldb.com/?ctiid.329915 https://vuldb.com/?id.329915 https://vuldb.com/?submit.673775

Share on: