Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/04/01 5:0 a.m.2 views

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

4.8CVSS6AI score0.0022EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/31 6:31 p.m.3 views

EUVD-2026-17581

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

4.8CVSS6AI score0.0022EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/03/31 12:0 a.m.3 views

PT-2026-29324

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the save loan action. The application fails to properly sanitize user input supplied to the "borrower id" parameter in a POST request, allowing ...

6AI score0.0022EPSS
Exploits1References2
CVE
CVE
added 2026/03/31 12:0 a.m.6 views

CVE-2026-30520

SourceCodester Loan Management System v1.0 contains a Blind SQL Injection in ajax.php (save_loan action) where the borrower_id parameter in a POST request is not properly sanitized. An authenticated attacker could inject SQL commands via this input. The affected component is the web application’s...

5.4CVSS6AI score0.0022EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/31 12:0 a.m.2 views

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

6AI score0.0022EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.5 views

SourceCodester Loan Management System 安全漏洞

The SourceCodester Loan Management System is an open-source loan management system developed by SourceCodester. Version 1.0 of the SourceCodester Loan Management System has a security vulnerability. This vulnerability stems from improper input cleaning of the borrowerid parameter in the file...

5.4CVSS5.8AI score0.0022EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/31 12:0 a.m.1 views

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

6AI score0.0022EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.1 views

Loan Management System SQL Injection Vulnerability

Loan Management System is a loan management system by razormist individual developers. A SQL injection vulnerability exists in Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter borrowerid that can lead to sql injection...

7.2CVSS8.4AI score0.00763EPSS
Exploits1References3
Rows per page
Query Builder