CVE-2025-69948

CriticalCVSS 9.8

Published: 31/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 01/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. Attackers can manipulate the id parameter to execute unauthorized SQL queries.

Risk Assessment

Attackers can read, modify, or delete database data, leading to breach of data confidentiality and integrity.

Recommendation

Use parameterized SQL queries or prepared statements in delete_group.php.

Original NVD description (English source)

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.