CVE-2025-7212

A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agentid leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-7212

The CVE-2025-7212 entry relates to itsourcecode Insurance Management System (up to v1.0). The vulnerability arises from SQL injection in the insertAgent.php file via the agent_id parameter, allowing remote exploitation. Reported impact includes Confidentiality, Integrity, and Availability concern...

CVE-2025-7212 itsourcecode Insurance Management System insertAgent.php sql injection

A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agentid leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-7212 itsourcecode Insurance Management System insertAgent.php sql injection

A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agentid leads to sql injection. The attack may be initiated remotely. The explo...

PT-2025-28836 · Itsourcecode · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Insurance Management System version 1.0 Description: A critical issue affects the itsourcecode Insurance Management System, where the manipulation of the agent id argument in the /insertAgent.php file leads to SQL injection. This...

CVE-2025-7212: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agentid leads to sql injection. The attack may be initiated remotely. The explo...

itsourcecode Insurance Management System 注入漏洞

itsourcecode Insurance Management System is itsourcecode open source insurance management system. An injection vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which stems from SQL injection in the agentid parameter of the insertAgent.php file...

CVE-2025-6136

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6134

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6135

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6133

A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agentid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6136

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6136 Projectworlds Life Insurance Management System insertPayment.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6136

Projectworlds Life Insurance Management System 1.0 contains a SQL injection in /insertPayment.php caused by manipulating the recipt_no parameter. This vulnerability can be exploited remotely and has had publicly disclosed exploits. Mitigation available in the connected PT-2025-25584 entry suggest...

CVE-2025-6136 Projectworlds Life Insurance Management System insertPayment.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6135

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6134

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6135 Projectworlds Life Insurance Management System insertNominee.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6135 Projectworlds Life Insurance Management System insertNominee.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6135

CVE-2025-6135 affects Projectworlds Life Insurance Management System v1.0. The vulnerability resides in /insertNominee.php, where manipulation of the arguments client_id/nominee_id enables SQL injection. Reports indicate remote exploitation with the exploit disclosed publicly. Affected components...