CVE-2022-30335: Wealth Bonanza Wealth Management System

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.

Affected products

• Wealth Bonanza Wealth Management System: version 7.3.2 only

Published 2022-05-09. Last modified 2026-06-17.