10 matches found
CVE-2025-7905
A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack can be initiated remotely. The exploit ha...
CVE-2025-7905
A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack can be initiated remotely. The exploit ha...
Itsourcecode Insurance Management System injection vulnerability
itsourcecode Insurance Management System is an insurance management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which is caused by incorrect manipulation of the parameter reciptno in the file /insertPayment.ph...
CVE-2025-7905: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack can be initiated remotely. The exploit ha...
CVE-2025-6136: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-2064: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be launche...
Project Worlds Life Insurance Management System security vulnerabilities
Project Worlds Life Insurance Management System is a life insurance management system from Project Worlds, Inc. A security vulnerability exists in Project Worlds Life Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter reciptno that can lead to SQL...
CVE-2024-10734: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-8216: Improper Access Control
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...
Insurance Management System Access Control Vulnerability
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. An access control error vulnerability exists in Insurance Management System version 1.0, which stems from the manipulation of the parameter reciptno in the component payment handle...