CVE-2025-69946

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection within the ajaxData.php endpoint. The root cause is the improper handling of the district_id, division_id, region_id, and ward_id parameters, which allows malicious SQL statements to be executed against the database. ...