A vulnerability classified as critical was found in SourceCodester Online Bank Management System 1.0. Impacted is an unknown function of the file /bank/show.php. Executing manipulation of the argument ID can lead to sql injection.
This vulnerability appears as CVE-2025-9304. The attack may be performed from a remote location. In addition, an exploit is available.