What’s Vulnerable › Vulnerabilities
CVE-2022-37138
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-09-14 · updated 2026-06-17
- Weakness: CWE-89
Description
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.
Affected products
References
- https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md
- https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.html
- https://github.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md
- https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.html
Get alerted when CVE-2022-37138 or the next vulnerability affects your stack