GCVE - cpe:2.3:a:oretnom23:banking_system:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:banking_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Oretnom23 (`bb7583fb-f029-599f-a8a3-33d64769aa1f`)
Product	Banking System (`157e3f98-ce82-5f93-a612-24dbae1e4eb0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-14221`	vulnerable	2026-06-08 07:06:33.886062	SourceCodester Online Banking System page cross site scripting LOW (3.5) A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Published: 2025-12-08T07:02:06.112Z Updated: 2025-12-08T17:11:07.296Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334663 https://vuldb.com/?ctiid.334663 https://vuldb.com/?submit.701624 https://mega.nz/file/T4hjCagS#87U1JgRHZWzXW2HTpBIG-H9dJ_w9kUERmaaQqJyB5_Q https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26646`	vulnerable	2026-06-08 05:41:52.636130	Details available Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter. Published: 2022-03-30T22:47:20.000Z Updated: 2026-07-09T00:18:08.743Z Open on db.gcve.eu Reference links https://github.com/erik-451/CVE/blob/main/CVE-2022-26646/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26645`	vulnerable	2026-06-08 05:41:52.635575	Details available A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function. Published: 2022-03-30T22:23:47.000Z Updated: 2026-07-09T00:18:07.520Z Open on db.gcve.eu Reference links https://github.com/erik-451/CVE/tree/main/CVE-2022-26645	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26644`	vulnerable	2026-06-08 05:41:52.635017	Details available Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info and accounts management. Published: 2022-03-30T22:51:04.000Z Updated: 2026-07-09T00:18:06.291Z Open on db.gcve.eu Reference links https://github.com/erik-451/CVE/tree/main/CVE-2022-26644	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41659`	vulnerable	2026-06-08 05:35:20.869560	Details available SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field. Published: 2022-01-24T17:47:42.000Z Updated: 2024-08-04T03:15:29.401Z Open on db.gcve.eu Reference links https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-16-092421	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.