Threats tagged 'ghsa-6wx8-m948-4694'

A SQL injection vulnerability exists in itsourcecode Online Loan Management System 1.0 in the /manage_user.php file due to improper handling of the ID argument. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity rating with a CVSS score of 7.3.