Razormist

Loan Management System

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2024-48415

  • EPSS 0.45%
  • Veröffentlicht 22.10.2024 22:15:05
  • Zuletzt bearbeitet 26.11.2024 20:29:57

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functionality on the Borrowers page.

9.8

CVE-2024-31678

Exploit
  • EPSS 0.1%
  • Veröffentlicht 11.04.2024 16:15:25
  • Zuletzt bearbeitet 08.04.2025 15:20:02

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.

7.2

CVE-2023-6312

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.11.2023 03:15:07
  • Zuletzt bearbeitet 21.11.2024 08:43:35

A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is the function delete_user of the file deleteUser.php of the component Users Page. The manipulation of the argument user_id leads to...

7.2

CVE-2023-6310

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.11.2023 02:15:43
  • Zuletzt bearbeitet 21.11.2024 08:43:35

A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical. This vulnerability affects the function delete_borrower of the file deleteBorrower.php. The manipulation of the argument borrower_id leads to sql ...

7.2

CVE-2023-6311

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.11.2023 02:15:43
  • Zuletzt bearbeitet 21.11.2024 08:43:35

A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects the function delete_ltype of the file delete_ltype.php of the component Loan Type Page. The manipulation of the argument ltype_id le...

5.4

CVE-2023-27242

Exploit
  • EPSS 0.11%
  • Veröffentlicht 24.03.2023 12:15:07
  • Zuletzt bearbeitet 19.02.2025 22:15:15

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module.

9.8

CVE-2022-2666

Exploit
  • EPSS 0.31%
  • Veröffentlicht 07.01.2023 22:15:09
  • Zuletzt bearbeitet 26.11.2024 20:29:57

A vulnerability has been found in SourceCodester Loan Management System and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be ini...

9.8

CVE-2022-37138

Exploit
  • EPSS 0.25%
  • Veröffentlicht 14.09.2022 11:15:50
  • Zuletzt bearbeitet 26.11.2024 20:29:57

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.

5.4

CVE-2022-37139

Exploit
  • EPSS 0.21%
  • Veröffentlicht 14.09.2022 11:15:50
  • Zuletzt bearbeitet 26.11.2024 20:29:57

Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

9.8

CVE-2022-2766

Exploit
  • EPSS 0.32%
  • Veröffentlicht 11.08.2022 10:15:08
  • Zuletzt bearbeitet 26.11.2024 20:29:57

A vulnerability was found in SourceCodester Loan Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument password leads to sql injection. The atta...