https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:31:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278513 EUVD-2026-278513 https://cve.radiocsirt.org/vuln/euvd-2026-278513 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30523 <p>A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define &#34;Loan Plans&#34; which determine the duration of a loan (in months). However, the backend fails to validate that the duration must be a positive integer. An attacker can submit a negative value for the months parameter. The system accepts this invalid data and creates a loan plan with a negative duration.</p> <p>A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define &#34;Loan Plans&#34; which determine the duration of a loan (in months). However, the backend fails to validate that the duration must be a positive integer. An attacker can submit a negative value for the months parameter. The system accepts this invalid data and creates a loan plan with a negative duration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30523 https://cve.radiocsirt.org/vuln/ghsa-5gjp-7788-qpxg <p>A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define &#34;Loan Plans&#34; which determine the duration of a loan (in months). However, the backend fails to validate that the duration must be a positive integer. An attacker can submit a negative value for the months parameter. The system accepts this invalid data and creates a loan plan with a negative duration.</p> <p>A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define &#34;Loan Plans&#34; which determine the duration of a loan (in months). However, the backend fails to validate that the duration must be a positive integer. An attacker can submit a negative value for the months parameter. The system accepts this invalid data and creates a loan plan with a negative duration.</p> https://cve.radiocsirt.org/vuln/ghsa-5gjp-7788-qpxg