Loan Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:loan_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Loan Management System (40f5ea2e-2d70-5fa0-b717-0766057263b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3702 |
vulnerable | 2026-06-08 08:01:19.207596 |
SourceCodester Loan Management System index.php cross site scripting
MEDIUM (4.3)
A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-03-08T04:02:10.269Z
Updated: 2026-03-10T13:59:23.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6312 |
vulnerable | 2026-06-08 06:19:46.908257 |
SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injection
MEDIUM (4.7)
A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is the function delete_user of the file deleteUser.php of the component Users Page. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246138 is the identifier assigned to this vulnerability.
Published: 2023-11-27T02:31:03.946Z
Updated: 2024-10-10T20:26:21.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6311 |
vulnerable | 2026-06-08 06:19:46.907662 |
SourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injection
MEDIUM (4.7)
A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects the function delete_ltype of the file delete_ltype.php of the component Loan Type Page. The manipulation of the argument ltype_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246137 was assigned to this vulnerability.
Published: 2023-11-27T02:00:06.792Z
Updated: 2024-08-02T08:28:21.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6310 |
vulnerable | 2026-06-08 06:19:46.906295 |
SourceCodester Loan Management System deleteBorrower.php delete_borrower sql injection
MEDIUM (4.7)
A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical. This vulnerability affects the function delete_borrower of the file deleteBorrower.php. The manipulation of the argument borrower_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246136.
Published: 2023-11-27T02:00:05.747Z
Updated: 2024-08-29T19:08:05.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2766 |
vulnerable | 2026-06-08 05:43:36.436055 |
SourceCodester Loan Management System index.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Loan Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-206162 is the identifier assigned to this vulnerability.
Published: 2022-08-11T09:30:29.000Z
Updated: 2025-04-14T15:59:39.781Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2667 |
vulnerable | 2026-06-08 05:43:35.992307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2666 |
vulnerable | 2026-06-08 05:43:35.990868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.