martmbithi records
12 published records for vendor martmbithi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-5693No exploit | CodeAstro Internet Banking System pages_reset_pwd.php sql injectionmartmbithi · internet banking system · CWE-89 | Critical9.8 | — | 0.7% | Oct 22, 2023 |
39Monitor | CVE-2025-29411No exploit | An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute amartmbithi · ibanking · CWE-434 | Critical9.8 | — | 0.6% | Mar 20, 2025 |
35Monitor | CVE-2023-5795No exploit | CodeAstro POS System Profile Picture profil unrestricted uploadmartmbithi · pos system · CWE-434 | High8.8 | — | 0.8% | Oct 26, 2023 |
35Monitor | CVE-2023-5796No exploit | CodeAstro POS System Logo setting unrestricted uploadmartmbithi · pos system · CWE-434 | High8.8 | — | 0.8% | Oct 26, 2023 |
24Monitor | CVE-2023-5698No exploit | CodeAstro Internet Banking System pages_deposit_money.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2023-5699No exploit | CodeAstro Internet Banking System pages_view_client.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2023-5694No exploit | CodeAstro Internet Banking System pages_system_settings.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2023-5695No exploit | CodeAstro Internet Banking System pages_reset_pwd.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2023-5697No exploit | CodeAstro Internet Banking System pages_withdraw_money.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2023-5696No exploit | CodeAstro Internet Banking System pages_transfer_money.php cross site scriptingmartmbithi · internet banking system · CWE-79 | Medium6.1 | — | 0.5% | Oct 22, 2023 |
24Monitor | CVE-2024-0781No exploit | CodeAstro Internet Banking System pages_client_signup.php redirectmartmbithi · internet banking system · CWE-601 | Medium6.1 | — | 0.5% | Jan 22, 2024 |
19Monitor | CVE-2025-29412No exploit | A cross-site scripting (XSS) vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execumartmbithi · ibanking · CWE-79 | Medium4.8 | — | 0.2% | Mar 20, 2025 |
- CVE-2023-569339Monitor
CodeAstro Internet Banking System pages_reset_pwd.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2025-2941139Monitor
An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute a
CriticalCVSS 9.8No exploitEPSS 0%martmbithi · ibankingMar 20, 2025
- CVE-2023-579535Monitor
CodeAstro POS System Profile Picture profil unrestricted upload
HighCVSS 8.8No exploitEPSS 0%martmbithi · pos systemOct 26, 2023
- CVE-2023-579635Monitor
CodeAstro POS System Logo setting unrestricted upload
HighCVSS 8.8No exploitEPSS 0%martmbithi · pos systemOct 26, 2023
- CVE-2023-569824Monitor
CodeAstro Internet Banking System pages_deposit_money.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2023-569924Monitor
CodeAstro Internet Banking System pages_view_client.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2023-569424Monitor
CodeAstro Internet Banking System pages_system_settings.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2023-569524Monitor
CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2023-569724Monitor
CodeAstro Internet Banking System pages_withdraw_money.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2023-569624Monitor
CodeAstro Internet Banking System pages_transfer_money.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemOct 22, 2023
- CVE-2024-078124Monitor
CodeAstro Internet Banking System pages_client_signup.php redirect
MediumCVSS 6.1No exploitEPSS 0%martmbithi · internet banking systemJan 22, 2024
- CVE-2025-2941219Monitor
A cross-site scripting (XSS) vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execu
MediumCVSS 4.8No exploitEPSS 0%martmbithi · ibankingMar 20, 2025