PT-2025-6908 · Unknown · Code-Projects Real Estate Property Management System

Junfeigu

·

Published

2025-02-16

·

Updated

2025-04-02

·

CVE-2025-1379

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0
Description: A critical issue has been found in the code-projects Real Estate Property Management System. The problem affects an unknown functionality of the file /Admin/CustomerReport.php. Manipulation of the city argument leads to SQL injection. The attack can be launched remotely.
Recommendations: For code-projects Real Estate Property Management System version 1.0, as a temporary workaround, consider restricting access to the /Admin/CustomerReport.php file until a patch is available. Avoid using the city argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-1379

Affected Products

Code-Projects Real Estate Property Management System