PT-2025-6840 · Code Projects · Code-Projects Real Estate Property Management System

Resyul · Published 2025-02-12 · Updated 2025-02-20 · CVE-2025-1195

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0

Description A problem has been found in the processing of the file /Admin/EditCategory. The manipulation of the CategoryId argument leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For code-projects Real Estate Property Management System version 1.0, consider disabling access to the /Admin/EditCategory file until a patch is available. Restrict the manipulation of the CategoryId argument to minimize the risk of exploitation.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

BDU:2026-07569

CVE-2025-1195

Affected Products

Code-Projects Real Estate Property Management System

References · 12

• 🔥 https://github.com/YinshengLu/CVE/blob/main/cve1.pdf · Exploit
• https://bdu.fstec.ru/vul/2026-07569 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1195 · Security Note
• https://vuldb.com/?id.295103 · Note
• https://code-projects.org · Note
• https://vuldb.com/?submit.496854 · Note
• https://t.me/cvenotify/111030 · Telegram Post
• https://vuldb.com/?ctiid.295103 · Note
• https://twitter.com/CVEnew/status/1889673476258079036 · Twitter Post
• https://t.me/cvedetector/17855 · Telegram Post
• https://t.me/cvenotify/111943 · Telegram Post