What is CVE-2025-69946?
A SQL Injection vulnerability has been identified in SourceCodester Modern Loan Management System 1.0, specifically in the ajaxData.php file through the `district_id`, `division_id`, `region_id`, and `ward_id` parameters. This flaw could allow an attacker to gain unauthorized access to the database. It is recommended to urgently implement input validation and parameterized queries.
Azərbaycanca: SourceCodester Modern Loan Management System 1.0 proqramında ajaxData.php faylındakı `district_id`, `division_id`, `region_id` və `ward_id` parametrləri vasitəsilə SQL Injection zəifliyi aşkar edilib. Bu zəiflikdən istifadə edərək təcavüzkar verilənlər bazasına icazəsiz giriş əldə edə bilər. Təcili olaraq daxil edilən məlumatların yoxlanılması və parametrləşdirilmiş sorğuların tətbiqi tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-89; shared vendor: SourceCodester
FAQ2
What type of vulnerability was discovered in SourceCodester Modern Loan Management System 1.0?
A SQL Injection vulnerability was discovered in SourceCodester Modern Loan Management System 1.0.
How can this vulnerability be mitigated?
It is recommended to implement input validation and parameterized queries.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.