CVE:CVE-2022-25222
CNNVD:CNNVD-202203-2050
Money Transfer Management System是一个汇款管理系统。
Money Transfer Management System 1.0 版本存在SQL注入漏洞。该漏洞源于 Money Transfer Management System 1.0 版本允许未经身份验证的用户通过 id 参数在 admin/maintenance/manage_branch.php 和 admin/maintenance/manage_fee.php 中注入 SQL 查询。
solution:Upgrade money_transfer_management_system_project money_transfer_management_system to a higher version than 1.0,and avoid the version 1.0