CVE-2022-41535

Open Source SACCO Management System v1.0 contains a SQL injection vulnerability in the id parameter of /sacco_shield/manage_borrower.php. The issue is confirmed across multiple sources; CVSS v3.1 scores it 7.2 (HIGH) with Confidentiality, Integrity, and Availability impacts. Attack vector is NETW...