A vulnerability was detected in the Insurance-Management-System, specifically affecting the Policy Holder Update Form. The vulnerability allows for improper authorization due to manipulation of the Policy_no argument. This issue can be exploited remotely, and a public exploit is available. The project follows a rolling release approach, making version details for affected and updated releases unavailable. [truncated]
A vulnerability was identified in the Insurance-Management-System, specifically in the function mysqli_query of the file /Admin/View/editPlan.php. This vulnerability is due to SQL injection, which can be exploited remotely. The exploit is publicly available, but version information for affected or updated releases is unavailable due to the product's rolling release model. The project was informed but has [truncated]
