Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-27927: Microfinance Management System in PHP Free Source Code

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.

CVE
#sql#vulnerability#web#apache#php#pdf

Submitted by Adam Chengula on Tuesday, March 22, 2022 - 10:48.

****Introduction****

This simple project is a Microfinance Management System. This is a web application that provides an online platform for Microfinance Businesses to manage their clients’ accounts. It allows the management to easily store and retrieve their client records. It has a simple and pleasant user interface using Bootstrap. It also has user-friendly features and functionalities.

****About the Microfinance Management System****

I developed this project using the following:

  • XAMPP v3.3.0
  • PHP
  • MySQL Database
  • HTML
  • CSS
  • Bootstrap

This Simple Microfinance Management System has many different features and functionalities. The application contains CRUD (Create, Read, Update, and Delete) operations for each list. The management can store, retrieve, and manage records of customer/client, account status, and account type lists. Each List in the application has a Generated Printable List using TCpdF Library. The application also contains a simple Dashboard Page that displays the summary of the list.

****Features******Management-Side**

  • Secure Login and Logout
  • Dashboard
  • Customer Type Management
    • Add new Customer Type
    • List All Customer Types
    • Print Customer Type Details
    • Update Customer Type Details
    • Delete Customer Type Details
  • Customer Management
    • Add new Customer
    • List All Customers
    • Print Customer Details
    • Update Customer Details
    • Delete Customer Details
  • Account Type Management
    • Add new Account Type
    • List All Account Types
    • Print Account Type Details
    • Update Account Type Details
    • Delete Account Type Details
  • Account Status Management
    • Add new Account Status
    • List All Account Statuses
    • Print Account Status Details
    • Update Account Status Details
    • Delete Account Status Details
  • Account Management
    • Add new Account
    • List All Accounts
    • Print Account Details
    • Update Account Details
    • Delete Account Details

Note: The Reports Feature is not included in the source code.

The source code was developed only for educational purposes only. You can download the source code for free and modify it the way you wanted.

System Snapshots of some Features

How to Run ??

****Requirements****

  • Download and Install any local web server such as XAMPP/WAMP.
  • Download the provided source code zip file. (download button is located below)

****Installation/Setup****

  1. Open your XAMPP/WAMP’s Control Panel and start ****Apache**** and ****MySQL****.
  2. Extract the downloaded source code zip file.
  3. If you are using XAMPP, copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory. And If you are using WAMP, paste it into the “www” directory.
  4. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  5. Create a new database naming ****mims****.
  6. Import the provided ****SQL**** file. The file is known as ****mims.sql**** located inside the database folder.
  7. Open the extracted Source Code folder and extract the asstes.zip file to the same location. This file contains the libraries that are used in this application.
  8. Browse the Microfinance Management System in a browser. i.e. ****http://localhost/mims/****.

****Default Admin Access****

Username: admin
Password: 123456

****DEMO VIDEO****

That’s it. You can now explore the features and functionalities of this Microfinance Management System in PHP. I hope this will help you with what you are looking for and you’ll find something useful for your future projects.

Explore more on this website for more Free Source Codes and Tutorials.

Enjoy :)

  • 6073 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda