CVE-2026-30520 in SourceCodester Loan Management System
Сводка (Английский)
A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The application fails to properly sanitize user input supplied to the "borrower_id" parameter in a POST request, allowing an authenticated attacker to inject malicious SQL commands.
Ответственный
MITRE
Резервировать
04.03.2026
Раскрытие
31.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354487 | SourceCodester Loan Management System POST ajax.php save_loan SQL-инъекция | 89 | Не определено | Не определено | CVE-2026-30520 |