CVE-2025-12617 itsourcecode Billing System login_crud.php sql injection

A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/logincrud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

CVE-2025-12617

The CVE-2025-12617 issue affects itsourcecode Billing System 1.0, specifically the file /admin/app/login_crud.php. The vulnerability stems from improper handling of the Password argument, enabling SQL injection. It is exploitable remotely, and public exploits have been published. Multiple connect...

CVE-2025-12608 itsourcecode Online Loan Management System manage_user.php sql injection

A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manageuser.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12608

CVE-2025-12608 affects itsourcecode Online Loan Management System 1.0. The vulnerability is in an unknown function within /manage_user.php where manipulation of the ID parameter enables SQL injection. The issue is exploitable remotely and the exploit has been released publicly. Multiple connected...

EUVD-2025-37451

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12607 itsourcecode Online Loan Management System manage_payment.php sql injection

A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /managepayment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2025-12607 itsourcecode Online Loan Management System manage_payment.php sql injection

A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /managepayment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2025-12607

CVE-2025-12607 affects itsourcecode Online Loan Management System 1.0; the vulnerability lies in the /manage_payment.php file where manipulation of the ID argument enables SQL injection. It is exploitable remotely, with public exploit availability. Multiple connected sources corroborate the issue...

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH Billing System project contains an administrator side. This PH Billing System project includes an administrator side where the...

itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageuser.php,...

PT-2025-44750

Name of the Vulnerable Software and Affected Versions itsourcecode Billing System version 1.0 Description A flaw exists in itsourcecode Billing System 1.0. The issue affects an unknown function within the /admin/app/login crud.php file. Manipulation of the Password argument can lead to a SQL...

PT-2025-44741

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. Manipulation of the ID argument in the /manage payment.php file can lead to remote co...

PT-2025-44742

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A security flaw exists in itsourcecode Online Loan Management System. Manipulation of the ID argument in an unknown function within the /manage user.php file can lead to SQL...

CVE-2025-12606

Consolidated reports from Red Hat, CIRCL, CNNVD and others confirm a SQL injection in itsourcecode Online Loan Management System 1.0, caused by manipulation of the ID parameter in /manage_borrower.php. Remote exploitation is possible and has been publicly disclosed. The connected documents do not...

CVE-2025-12606 itsourcecode Online Loan Management System manage_borrower.php sql injection

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manageborrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-12605

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12604

The CVE-2025-12604 entry concerns itsourcecode Online Loan Management System 1.0. Affected component: /load_fields.php. Root cause: manipulation of the loan_id parameter enables SQL injection. The issue is exploitable remotely and public disclosure exists. Several connected sources corroborate th...

PT-2025-44740

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in the processing of the /manage borrower.php file within itsourcecode Online Loan Management System. Manipulation of the ID argument can lead to a SQL injection...