Threats tagged 'ghsa-52mc-8c8q-x9g6'

CVE-2025-13276 is a high-severity SQL injection vulnerability in the g33kyrash Online-Banking-System affecting the /index.php file via the Username parameter. The vulnerability allows remote attackers to manipulate the Username argument to execute SQL injection attacks. The product uses rolling releases, so specific affected and fixed versions are not available. Public exploit code exists, but no known exploitation in the wild has been reported.