CVE-2022-1081
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipu...
Affects 1 product across 1 vendor.
Attacker injects malicious scripts into web pages viewed by other users, executing in the victim's browser context.
Show all 6
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A cross-site scripting (XSS) vulnerability exists in SourceCodester Microfinance Management System 1.0, affecting the addcustomerHandler.php file. This vulnerability can be exploited remotely by manipulating the first_name, middle_name, and surname arguments.
BSID: BS-2022-GLOBAL-324154-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2022-1081?
What is the CVSS score for CVE-2022-1081?
Is CVE-2022-1081 actively exploited?
How do I remediate CVE-2022-1081?
What systems are affected by CVE-2022-1081?
| CVE ID | CVE-2022-1081 |
|---|---|
| BSID | BS-2022-GLOBAL-324154-M BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| Published | 2022-03-29 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.
Source: NIST NVD / MITRE CVE Database
The vulnerability is triggered by injecting malicious scripts into the first_name, middle_name, and surname fields in the addcustomerHandler.php file. An attacker can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, defacement, or data theft.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Microfinance Management System Project | Microfinance Management System | 1.0 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | bf5f3411a8e18546b76cc1936db6536fba0c3d4ba05ab4ad83d055b61505e4a6cb4595f72f9d4b9f0a2b436507c9f2f9c0a51c26c0ebd01b5052efb861fa244d |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →