SQL Injection Vulnerability in SourceCodester Modern Loan Management System
CVE-2025-69948

9.8CRITICAL

Key Information:

Vendor: SourceCodester
Status: Modern Loan Management System
Vendor: CVE Published:; 31 July 2026

🔔 Create SourceCodester Vulnerability Alert

What is CVE-2025-69948?

The SourceCodester Modern Loan Management System version 1.0 is exposed to a SQL Injection vulnerability through the parameter 'id' in the delete_group.php script. This flaw allows attackers to execute arbitrary SQL queries by manipulating input data, potentially compromising the database and exposing sensitive information.

References

https://github.com/um-dsp/TaintRadar/blob/main/sql_inject...

https://github.com/um-dsp/TaintRadar

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 31, 2026
Vulnerability Reserved
Jan 9, 2026

CVE-2025-69948 Data

JSON