Threats tagged 'ghsa-6v8g-5jx8-5p7w'

CVE-2026-104625 is a medium severity SQL injection vulnerability in CodeAstro Simple Loan Management System version 1.0. The flaw exists in an unknown function within /admin/index.php, where manipulation of the g_name argument allows SQL injection. The vulnerability can be exploited remotely without user interaction. Public exploit code has been released, increasing the risk of attacks. No patch or official remediation information is currently available.