← Database

CVE-2022-26645

CRITICAL CVSS: 9.8 Published: 2022-03-30 Modified: 2026-07-09

Description

A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.

Affected Platforms

Oretnom23 Banking System

Weakness Type

CWE-434

References