Unknown · Online Banking System · CVE-2022-40119
**Name of the Vulnerable Software and Affected Versions**
Online Banking System version 1.0
**Description**
The issue is related to a SQL injection vulnerability. It can be exploited via the `search term` parameter at the "/net-banking/transactions.php" API endpoint.
**Recommendations**
For Online Banking System version 1.0, as a temporary workaround, consider restricting access to the "/net-banking/transactions.php" endpoint or sanitizing the `search term` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.