CVE-2025-12607

CVE-2025-12607 affects itsourcecode Online Loan Management System 1.0; the vulnerability lies in the /manage_payment.php file where manipulation of the ID argument enables SQL injection. It is exploitable remotely, with public exploit availability. Multiple connected sources corroborate the issue...