Login Request a demo
LM
Product
Loan Management System
by Razormist · last CVE Oct 22, 2024
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 3Low 0
Severity
All severities11Critical4High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Loan Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31678
9.8
1%
Apr 11
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file
Affected: 1.0
CVE-2022-2666
9.8
1%
Jan 7
A vulnerability has been found in SourceCodester Loan Management System and classified as critical
Affected: 1.0
CVE-2022-37138
9.8
1%
Sep 14
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form
Affected: 1.0
CVE-2022-2766
9.8
1%
Aug 11
SourceCodester Loan Management System index.php sql injection
Affected: All versions, or not specified
CVE-2022-2667
8.8
1%
Aug 5
SourceCodester Loan Management System delete_lplan.php sql injection
Affected: All versions, or not specified
CVE-2023-6312
7.2
1%
Nov 27
SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injection
Affected: 1.0
CVE-2023-6311
7.2
1%
Nov 27
SourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injection
Affected: 1.0
CVE-2023-6310
7.2
1%
Nov 27
SourceCodester Loan Management System deleteBorrower.php delete_borrower sql injection
Affected: 1.0
CVE-2023-27242
5.4
0%
Mar 24
SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module
Affected: 1.0
CVE-2022-37139
5.4
1%
Sep 14
Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability
Affected: 1.0
CVE-2024-48415
5.0
0%
Oct 22
itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and…
Affected: 1.0
Showing 11