Priority MEDIUM 56
itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functio…
CVSS 3.1MEDIUM 5.0· Local · No auth · User interaction · EPSS 0.00359 · Published 2024-10-22 · No fix listed CWE-79
Priority MEDIUM 50
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00594 · Published 2024-04-11 · No fix listed CWE-89
Priority HIGH 65
A vulnerability was found in SourceCodester Loan Management System 1.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00763 · Published 2023-11-27 · No fix listed CWE-89
Priority LOW 33
A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00763 · Published 2023-11-27 · No fix listed CWE-89
Priority HIGH 65
A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00763 · Published 2023-11-27 · No fix listed CWE-89
Priority MEDIUM 58
SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00427 · Published 2023-03-24 · No fix listed CWE-79
Priority MEDIUM 44
A vulnerability has been found in SourceCodester Loan Management System and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00946 · Published 2023-01-07 · No fix listed CWE-89
Priority MEDIUM 44
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01215 · Published 2022-09-14 · No fix listed CWE-89
Priority LOW 25
Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00637 · Published 2022-09-14 · No fix listed CWE-79
Priority HIGH 81
A vulnerability was found in SourceCodester Loan Management System.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01284 · Published 2022-08-11 · No fix listed CWE-89
Priority HIGH 71
A vulnerability was found in SourceCodester Loan Management System and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00894 · Published 2022-08-05 · No fix listed CWE-89
THREATIST.IORead the docs