CVE-2022-37138: Razormist Loan Management System

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.

Affected products

• Razormist Loan Management System: version 1.0 only

Published 2022-09-14. Last modified 2026-06-17.