Threats tagged 'ghsa-24q7-hvmv-5rmp'

A SQL injection vulnerability exists in itsourcecode Online Loan Management System 1.0 in the /load_fields.php file via the loan_id parameter. This vulnerability allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code has been disclosed. The vulnerability has a CVSS score of 7.3, indicating high severity.