CVE-2025-7904: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertNominee.php. The manipulation of the argument nomineeid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-6135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...

CVE-2025-2063: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be launched remotely...

CVE-2024-10735: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be initiated remotely. The...

CVE-2023-3165

CVE-2023-3165 affects SourceCodester Life Insurance Management System 1.0, specifically the insertNominee.php file under the POST Parameter Handler. The vulnerability arises from manipulating the nominee_id parameter, enabling cross-site scripting (stored XSS) that can be triggered remotely. Mult...

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in SourceCodester Life Insurance Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability in the...

CVE-2023-3165: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Life Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file insertNominee.php of the component POST Parameter Handler. The manipulation of the argument nomineeid leads...