CVE Catalog
CVE-2025-69946
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id, division_id, region_id, and ward_id. Attackers can inject malicious SQL queries.
Risk Assessment
Attackers can read, modify, or delete database data, leading to breach of data confidentiality and integrity.
Recommendation
Use parameterized SQL queries or prepared statements in ajaxData.php for all mentioned parameters.
Original NVD description (English source)
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.