CNNVD-202510-814 Information
Oct 06, 2025
cve
CNNVD ID
CNNVD-202510-814
Related CVE
- CNNVD Published: 2025-10-06
Description (Chinese)
Langley Online Banking System是美国Langley公司的一个在线银行系统。 Langley Online Banking System存在代码注入漏洞，该漏洞源于对Add Customer Page组件中文件/customer_add_action.php参数First Name的错误操作，可能导致跨站脚本攻击。
Description (English)
Landley Online Banking Systems is an online banking system of the United States company Langley. Langley Online Banking System has a code plug-in loophole, which results from an error in the file/customer add action.php parameter First Name of the Add Customer Page component, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Langley
Published
2025-10-06
Last Modified
2026-02-24
References
https://github.com/mhszed/Report/blob/main/online-banking-system-mastercustomer_home.php%20xss1.docx https://vuldb.com/?ctiid.327216 https://vuldb.com/?id.327216 https://vuldb.com/?submit.664562
Share on: