Internet Banking System

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_vie…CVE-2025-29017Codeastro · CVSS 8.8 · 0.9% likely

   CWE-434

2. CodeAstro Internet Banking System pages_reset_pwd.php sql injectionCVE-2023-5693CodeAstro · CVSS 6.3 · 0.7% likely

   CWE-89

3. CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted uploadCVE-2024-0194CodeAstro · CVSS 6.3 · 0.7% likely

   CWE-434

4. CodeAstro Internet Banking System pages_client_signup.php cross site scriptingCVE-2024-0773CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

5. CodeAstro Internet Banking System pages_view_client.php cross site scriptingCVE-2023-5699CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

6. CodeAstro Internet Banking System pages_deposit_money.php cross site scriptingCVE-2023-5698CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

7. CodeAstro Internet Banking System pages_withdraw_money.php cross site scriptingCVE-2023-5697CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

8. CodeAstro Internet Banking System pages_reset_pwd.php cross site scriptingCVE-2023-5695CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

9. CodeAstro Internet Banking System pages_system_settings.php cross site scriptingCVE-2023-5694CodeAstro · CVSS 3.5 · 0.6% likely

   CWE-79

10. CodeAstro Internet Banking System pages_transfer_money.php cross site scriptingCVE-2023-5696CodeAstro · CVSS 3.5 · 0.6% likely

    CWE-79

11. CodeAstro Internet Banking System pages_client_signup.php redirectCVE-2024-0781CodeAstro · CVSS 3.5 · 0.5% likely

    CWE-601

12. A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_acco…CVE-2024-56924Codeastro · CVSS 7.3 · 0.5% likely

    CWE-352

13. Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.CVE-2025-29015Codeastro · CVSS 6.1 · 0.3% likely

    CWE-79

14. A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Code Astro Internet Banking System 2.0.0.CVE-2025-29018Codeastro · CVSS 4.8 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.