A vulnerability identified as critical has been detected in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_loan. Performing manipulation of the argument ID results in sql injection.
This vulnerability was named CVE-2025-10108. The attack may be initiated remotely. In addition, an exploit is available.
