CVE-2025-9305 in Online Bank Management System

Riassunto

di MITRE • 21/08/2025

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. The affected element is an unknown function of the file /bank/mnotice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 21/08/2025
• Moderazione: accettato
• Voce: VDB-320910
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00421
• KEV: no
• Attività: molto basso
• Settore: Finance

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9305
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9305
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9305/