https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:58:52.379980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280296 EUVD-2026-280296 2026-10-06T22:58:52.425008+00:00 EUVD-2026-280296 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30520 fkie_cve-2026-30520 2026-10-06T22:58:52.425043+00:00

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The application fails to properly sanitize user input supplied to the "borrower_id" parameter in a POST request, allowing an authenticated attacker to inject malicious SQL commands.

 https://cve.radiocsirt.org/vuln/ghsa-v3wc-4m78-26x4 GHSA-v3wc-4m78-26x4 2026-10-06T22:58:52.425078+00:00

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The application fails to properly sanitize user input supplied to the "borrower_id" parameter in a POST request, allowing an authenticated attacker to inject malicious SQL commands.