Filtered by vendor Martmbithi Subscriptions
Filtered by product Ibanking Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-29412 1 Martmbithi 1 Ibanking 2025-04-01 4.8 Medium
A cross-site scripting (XSS) vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
CVE-2025-29411 1 Martmbithi 1 Ibanking 2025-03-28 9.8 Critical
An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.