CVE-2025-7212

The CVE-2025-7212 entry relates to itsourcecode Insurance Management System (up to v1.0). The vulnerability arises from SQL injection in the insertAgent.php file via the agent_id parameter, allowing remote exploitation. Reported impact includes Confidentiality, Integrity, and Availability concern...

itsourcecode Insurance Management System 注入漏洞

itsourcecode Insurance Management System is itsourcecode open source insurance management system. An injection vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which stems from SQL injection in the agentid parameter of the insertAgent.php file...

PT-2025-28836 · Itsourcecode · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Insurance Management System version 1.0 Description: A critical issue affects the itsourcecode Insurance Management System, where the manipulation of the agent id argument in the /insertAgent.php file leads to SQL injection. This...

CVE-2025-6136

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6135

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6134

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6133

A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agentid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6136

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6136 Projectworlds Life Insurance Management System insertPayment.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6136

Projectworlds Life Insurance Management System 1.0 contains a SQL injection in /insertPayment.php caused by manipulating the recipt_no parameter. This vulnerability can be exploited remotely and has had publicly disclosed exploits. Mitigation available in the connected PT-2025-25584 entry suggest...

CVE-2025-6136 Projectworlds Life Insurance Management System insertPayment.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6134

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6135

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6135 Projectworlds Life Insurance Management System insertNominee.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6135

CVE-2025-6135 affects Projectworlds Life Insurance Management System v1.0. The vulnerability resides in /insertNominee.php, where manipulation of the arguments client_id/nominee_id enables SQL injection. Reports indicate remote exploitation with the exploit disclosed publicly. Affected components...

CVE-2025-6135 Projectworlds Life Insurance Management System insertNominee.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-6134 Projectworlds Life Insurance Management System insertClient.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6134

Projectworlds Life Insurance Management System 1.0 contains a SQL injection vulnerability in /insertClient.php, caused by manipulation of the client_id parameter. Remote exploitation is possible, and public disclosures exist. Other parameters may be affected. Connected sources note a remediation ...

CVE-2025-6134 Projectworlds Life Insurance Management System insertClient.php sql injection

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-6133

A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agentid leads to sql injection. The attack may be launched remotely. The...