CVE-2025-69946

Name of the Vulnerable Software and Affected Versions SourceCodester Modern Loan Management System version 1.0

Description An issue exists in the 'ajaxData.php' endpoint where improper handling of the district id, division id, region id, and ward id parameters allows for SQL Injection. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update SourceCodester Modern Loan Management System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the 'ajaxData.php' endpoint or avoid using the district id, division id, region id, and ward id parameters until a patch is applied.