CVE-2025-13276

g33kyrash Online-Banking-System index.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.9EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

17 Nov 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

g33kyrash · Online-Banking-System

References

https://github.com/Nianalb/Report_Online-Banking-System/blob/main/SQL.docx https://vuldb.com/?ctiid.332611 https://vuldb.com/?id.332611 https://vuldb.com/?submit.690087