Oretnom23

Loan Management System

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-30522

Exploit
  • EPSS 0.04%
  • Veröffentlicht 01.04.2026 00:00:00
  • Zuletzt bearbeitet 01.04.2026 18:44:04

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific penalty rates for overdue payments. While the front...

6.5

CVE-2026-30523

Exploit
  • EPSS 0.06%
  • Veröffentlicht 01.04.2026 00:00:00
  • Zuletzt bearbeitet 07.04.2026 12:03:10

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which determine the duration of a loan (in months). However, ...

5.4

CVE-2026-30520

Exploit
  • EPSS 0.03%
  • Veröffentlicht 31.03.2026 00:00:00
  • Zuletzt bearbeitet 06.04.2026 14:16:22

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The application fails to properly sanitize user input supplied to the "bo...

6.5

CVE-2026-30521

Exploit
  • EPSS 0.04%
  • Veröffentlicht 31.03.2026 00:00:00
  • Zuletzt bearbeitet 02.04.2026 15:16:36

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific interest rates. While the frontend interface preven...

6.1

CVE-2026-3702

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.03.2026 04:02:10
  • Zuletzt bearbeitet 09.03.2026 16:36:37

A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is poss...