CVE:CVE-2022-41514
CNNVD:CNNVD-202210-314
Open Source SACCO Management System是Mayuri K.个人开发者的一个开源 SACCO 管理系统。
Open Source SACCO Management System v1.0版本存在SQL注入漏洞，该漏洞源于/sacco_shield/ajax.php?action=delete_loan 的id 参数存在安全问题。
solution:Upgrade open_source_sacco_management_system_project open_source_sacco_management_system to a higher version than 1.0,and avoid the version 1.0