Approved changes feed: RSS · Atom

cpe:2.3:a:microfinance_management_system_project:microfinance_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorMicrofinance Management System Project (f25e9550-f390-58f1-8dbb-edd0e02fe4ff)
ProductMicrofinance Management System (0eb83f90-87af-5f41-9d96-7591098bebd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27927 vulnerable 2026-06-08 05:42:43.890301 Details available
A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.
Published: 2022-04-19T12:32:00.000Z
Updated: 2024-08-03T05:41:11.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1082 vulnerable 2026-06-08 05:39:12.128317 SourceCodester Microfinance Management System Login Page login.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.
Published: 2022-03-29T05:50:47.000Z
Updated: 2025-04-15T14:43:37.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1081 vulnerable 2026-06-08 05:39:12.127650 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.
Published: 2022-03-29T05:50:45.000Z
Updated: 2025-04-15T14:43:46.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.