Threats tagged 'ghsa-8724-3vfp-9w37'

A SQL injection vulnerability exists in itsourcecode Online Loan Management System 1.0 in the /manage_payment.php file due to improper handling of the ID parameter. This vulnerability allows remote attackers to manipulate the argument leading to unauthorized database queries. Public exploit code is available. The vulnerability has a high severity with a CVSS score of 7.3.