Itsourcecode · Sourcecodester Insurance Management System · CVE-2025-7212
Name of the Vulnerable Software and Affected Versions:
itsourcecode Insurance Management System version 1.0
Description:
A critical issue affects the itsourcecode Insurance Management System, where the manipulation of the `agent id` argument in the /insertAgent.php file leads to SQL injection. This issue can be initiated remotely.
Recommendations:
For itsourcecode Insurance Management System version 1.0, as a temporary workaround, consider restricting access to the /insertAgent.php file and avoid using the `agent id` parameter until a patch is available.