CVE-2022-25222

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-03-23 · updated 2026-06-17
Weakness: CWE-89

Description

Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage_branch.php' and 'admin/maintenance/manage_fee.php' via the 'id' parameter.

Affected products

Money Transfer Management System: 1.0

References

https://fluidattacks.com/advisories/berry/
https://fluidattacks.com/advisories/berry/

Get alerted when CVE-2022-25222 or the next vulnerability affects your stack