CVE-2025-12604

The CVE-2025-12604 entry concerns itsourcecode Online Loan Management System 1.0. Affected component: /load_fields.php. Root cause: manipulation of the loan_id parameter enables SQL injection. The issue is exploitable remotely and public disclosure exists. Several connected sources corroborate th...

CVE-2025-12604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /loadfields.php. The manipulation of the argument loanid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...