Angeljudesuarez Online Loan Management System vulnerabilities

5 CVEs affecting Angeljudesuarez Online Loan Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12608, published 2025-11-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-12608, published 2025-11-03. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php. Performing manipulation of the…
CVE-2025-12606, published 2025-11-03. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manage_borrower.php. This manipulation of the argument ID…
CVE-2025-12605, published 2025-11-02. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manage_loan.php. The manipulation of the argument ID results in sql…
CVE-2025-12604, published 2025-11-02. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /load_fields.php. The manipulation of the argument loan_id leads to sql…
CVE-2025-12607, published 2025-11-03. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipulation of the argument ID leads to sql…