ORETNOM23 Loan Management System vulnerabilities

5 CVEs affecting ORETNOM23 Loan Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-30523, published 2026-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3702, published 2026-03-08. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page…
CVE-2026-30523, published 2026-04-01. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which…
CVE-2026-30522, published 2026-04-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific…
CVE-2026-30521, published 2026-03-31. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific…
CVE-2026-30520, published 2026-03-31. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specifically the save_loan action). The application fails…