CVE-2022-41530

Open Source SACCO Management System v1.0 is affected by a SQL injection in the id parameter of /sacco_shield/ajax.php?action=delete_borrower. Root cause: improper handling of user input leads to injection. Consequences per CVSS: high impact on confidentiality, integrity, and availability; exploit...

CVE-2022-41515

Open Source SACCO Management System v1.0 contains a SQL injection in the endpoint /sacco_shield/ajax.php?action=delete_payment via the id parameter. The affected component is the delete_payment path under sacco_shield; root cause is unsafely interpolated id input. CVSSv3.1 metrics indicate HIGH i...

CVE-2022-41536

The CVE-2022-41536 entry concerns Open Source SACCO Management System v1.0, with a SQL injection vulnerability in the id parameter of /sacco_shield/manage_user.php. The root cause is unsanitized input handling on the id parameter that leads to injected SQL commands. Impact is described as high fo...

CVE-2022-41514

The CVE-2022-41514 entry concerns Open Source SACCO Management System v1.0, with a SQL injection flaw in the id parameter of /sacco_shield/ajax.php?action=delete_loan. The root cause is an injection vulnerability in the handling of the id input, enabling attacker-controlled SQL execution. The vul...

CVE-2022-42218

Open Source SACCO Management System v1.0 is affected by a SQL Injection vulnerability in /sacco_shield/manage_loan.php. The CVE-2022-42218 entry shows a high-severity issue (CVSS v3.1: 7.2) with Network attack vector, Low attack complexity, requiring HIGH privileges and no user interaction, impac...

CVE-2022-41535

Open Source SACCO Management System v1.0 contains a SQL injection vulnerability in the id parameter of /sacco_shield/manage_borrower.php. The issue is confirmed across multiple sources; CVSS v3.1 scores it 7.2 (HIGH) with Confidentiality, Integrity, and Availability impacts. Attack vector is NETW...

CVE-2022-41532

Open Source SACCO Management System v1.0 contains a SQL injection in the id parameter of /sacco_shield/ajax.php?action=delete_plan. The CVE-2022-41532 entry notes impact on confidentiality, integrity, and availability (all high) with CVSS 3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. Affected compone...

CVE-2022-42143

Open Source SACCO Management System v1.0 is vulnerable to SQL injection via /sacco_shield/manage_payment.php (CVE-2022-42143). CVSSv3.1 base score 7.2 (HIGH) with network attack, low complexity, privileges required: HIGH, no user interaction. Impacts on confidentiality, integrity, and availabilit...