CVE-2025-12244

A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
References
Link Resource
https://code-projects.org/ Product
https://github.com/asd1238525/cve/blob/main/xss5.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.329915 Permissions Required VDB Entry
https://vuldb.com/?id.329915 Third Party Advisory VDB Entry
https://vuldb.com/?submit.673775 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:simple_e-banking_system:1.0:*:*:*:*:*:*:*

History

28 Oct 2025, 02:15

Type Values Removed Values Added
CPE cpe:2.3:a:fabian:simple_e-banking_system:1.0:*:*:*:*:*:*:*
First Time Fabian
Fabian simple E-banking System
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/asd1238525/cve/blob/main/xss5.md - () https://github.com/asd1238525/cve/blob/main/xss5.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.329915 - () https://vuldb.com/?ctiid.329915 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.329915 - () https://vuldb.com/?id.329915 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.673775 - () https://vuldb.com/?submit.673775 - Third Party Advisory, VDB Entry

27 Oct 2025, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-27 08:15

Updated : 2025-10-28 02:15


NVD link : CVE-2025-12244

Mitre link : CVE-2025-12244

CVE.ORG link : CVE-2025-12244


JSON object : View

Products Affected

fabian

  • simple_e-banking_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')