SQL Injection Vulnerability in Modern Loan Management System by SourceCodester
CVE-2025-69946

9.8CRITICAL

Key Information:

Vendor: SourceCodester
Status: Modern Loan Management System
Vendor: CVE Published:; 31 July 2026

🔔 Create SourceCodester Vulnerability Alert

What is CVE-2025-69946?

The Modern Loan Management System developed by SourceCodester contains a SQL Injection vulnerability in the ajaxData.php file. This issue arises due to insufficient validation and sanitization of user inputs through parameters such as district_id, division_id, region_id, and ward_id. An attacker could exploit this flaw to execute arbitrary SQL queries, potentially allowing unauthorized access to sensitive data or manipulation of the database.

References

https://github.com/um-dsp/TaintRadar/blob/main/sql_inject...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 31, 2026
Vulnerability Reserved
Jan 9, 2026

CVE-2025-69946 Data

JSON