CVE-2025-69946

CriticalCVSS 9.8

Published: 31/07/2026(UTC)Updated: 31/08/2026(UTC)Translated: 01/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id, division_id, region_id, and ward_id. Attackers can inject malicious SQL queries.

Risk Assessment

Attackers can read, modify, or delete database data, leading to breach of data confidentiality and integrity.

Recommendation

Use parameterized SQL queries or prepared statements in ajaxData.php for all mentioned parameters.

Other vulnerabilities in Modern Loan Management System

CVE-2025-69948Critical
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. Attackers can manipulate the id parameter to execute unauthorized SQL queries.

Original NVD description (English source)

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.