PT-2025-49405 · Rashmindungrani · Online-Banking

Brill · Published 2025-12-07 · Updated 2025-12-07 · CVE-2025-14192

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RashminDungrani online-banking (affected versions not specified)

Description A SQL injection issue exists in RashminDungrani online-banking. The issue is located in an unknown part of the file /site/dist/auth login.php. Manipulation of the Username argument can trigger the injection. The attack can be initiated remotely. The exploit has been made public. Continuous delivery with rolling releases is used, and the vendor did not respond to disclosure attempts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-14192

Affected Products

Online-Banking

References · 9

• 🔥 https://github.com/BrillBigbang/hole-gap/blob/main/online-banking-have-sql.docx · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14192 · Security Note
• https://vuldb.com/?ctiid.334612 · Note
• https://twitter.com/VulmonFeeds/status/1997678465449959541 · Twitter Post
• https://vuldb.com/?id.334612 · Note
• https://t.me/cveNotify/145030 · Telegram Post
• https://twitter.com/CVEnew/status/1997665042385215609 · Twitter Post
• https://vuldb.com/?submit.699237 · Note
• https://t.me/CVEtracker/39044 · Telegram Post