CVE-2025-7904: itsourcecode Insurance Management System insertNominee.php sql injection
A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertNominee.php. The manipulation of the argument nomineeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7904?
CVE-2025-7904 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-7904?
CVE-2025-7904 is a SQL injection vulnerability found in the itsourcecode Insurance Management System.
How does CVE-2025-7904 affect the system?
CVE-2025-7904 allows an attacker to manipulate the nominee_id parameter, potentially leading to unauthorized access or data manipulation.
How do I fix CVE-2025-7904?
To fix CVE-2025-7904, sanitize and validate all user inputs, especially the nominee_id parameter, and ensure proper parameterized queries are used.
Can CVE-2025-7904 be exploited remotely?
Yes, CVE-2025-7904 can be exploited remotely, allowing attackers to initiate SQL injection attacks from outside the system.