Sql injection

A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects the function deleteltype of the file deleteltype.php of the component Loan Type Page. The manipulation of the argument ltypeid leads to sql injection. The attack may be initiated...

CVE-2023-6311

CVE-2023-6311 affects SourceCodester Loan Management System 1.0, specifically the delete_ltype.php component (Loan Type Page). The vulnerability arises from insecure handling of the ltype_id parameter in delete_ltype, enabling SQL injection. Exploitation is described as remotely possible with con...