Threats tagged 'ghsa-qfj7-m3c9-27q9'

A SQL injection vulnerability exists in itsourcecode Online Loan Management System 1.0 in the /manage_borrower.php file due to improper handling of the ID parameter. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code has been disclosed.