PT-2025-6841 · Unknown · Code-Projects Real Estate Property Management System

Resyul

·

Published

2025-02-09

·

Updated

2025-02-20

·

CVE-2025-1196

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0
Description A problematic vulnerability was found in the code-projects Real Estate Property Management System. The issue affects an unknown function of the file /search.php. The manipulation of the PropertyName and StateName arguments leads to cross-site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Recommendations For version 1.0, consider disabling the PropertyName and StateName arguments in the /search.php file until a patch is available. Restrict access to the /search.php file to minimize the risk of exploitation. Avoid using the PropertyName and StateName parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79CWE-94

Related Identifiers

BDU:2025-02205
CVE-2025-1196

Affected Products

Code-Projects Real Estate Property Management System