Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:insurance_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductInsurance Management System (2248cedb-c406-5d63-a4c1-65f5b51f4fe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8135 vulnerable 2026-06-08 07:45:19.689527 itsourcecode Insurance Management System updateAgent.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This issue affects some unknown processing of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T06:32:05.969Z
Updated: 2025-07-25T11:46:48.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7905 vulnerable 2026-06-08 07:45:18.484523 itsourcecode Insurance Management System insertPayment.php sql injection
MEDIUM (6.3)
A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /insertPayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T19:02:06.110Z
Updated: 2025-07-21T15:55:11.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7904 vulnerable 2026-06-08 07:45:18.483191 itsourcecode Insurance Management System insertNominee.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertNominee.php. The manipulation of the argument nominee_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T17:02:06.267Z
Updated: 2025-07-21T16:01:21.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7212 vulnerable 2026-06-08 07:43:18.160129 itsourcecode Insurance Management System insertAgent.php sql injection
MEDIUM (6.3)
A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-09T02:32:06.221Z
Updated: 2025-07-09T16:52:17.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8216 vulnerable 2026-06-08 07:00:23.225860 nafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control
MEDIUM (5.4)
A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument recipt_no leads to improper access controls. The attack may be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-27T20:31:04.128Z
Updated: 2024-08-27T20:48:21.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8209 vulnerable 2026-06-08 07:00:23.067962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8208 vulnerable 2026-06-08 07:00:23.064335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7916 vulnerable 2026-06-08 06:58:23.899864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.