What is CVE-2025-69948?
A SQL Injection vulnerability exists in SourceCodester Modern Loan Management System 1.0, specifically in the /admin/delete_group.php file via the id parameter. This flaw allows a remote attacker to manipulate database queries due to insufficient input validation during group deletion. Immediate mitigation includes input sanitization and implementing prepared statements.
Azərbaycanca: SourceCodester Modern Loan Management System 1.0 proqramında `/admin/delete_group.php` faylında SQL Injection zəifliyi aşkarlanıb. Bu zəiflik silmə əməliyyatı zamanı `id` parametrinin düzgün yoxlanılmaması səbəbindən yaranır və uzaqdan hücumçuya verilənlər bazasını manipulyasiya etməyə imkan verir. Təcili olaraq giriş parametrlərinin təmizlənməsi və prepared statement-lərin tətbiqi tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-89; shared vendor: SourceCodester
FAQ2
Which version of SourceCodester Modern Loan Management System is affected by the CVE-2025-69948 SQL Injection vulnerability?
SourceCodester Modern Loan Management System 1.0 is affected.
What immediate mitigations are recommended to address CVE-2025-69948?
Input sanitization and implementing prepared statements are recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.