High severityNVD Advisory· Published Oct 6, 2026

CVE-2026-4889

Description

SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an attacker to discover the platform's database engine and cause delays in database queries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RDL Technologies/eLoanAppllm-create

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-sqli-eloanapp-platform-rdl-technologiesnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000