SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.
References 6
https://github.com/um-dsp/TaintRadar
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org