CVE-2025-1171: code-projects Real Estate Property Management System CustomerReport.php cross site scripting

Published Feb 11, 2025

Updated

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Feb 11, 2025

CVE Published

via MITRE·03:31 AM

Data Sourced

via MITRE·03:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-1171?

CVE-2025-1171 is classified as a problematic vulnerability affecting the Real Estate Property Management System.

How do I fix CVE-2025-1171?

To fix CVE-2025-1171, you should implement input validation and sanitization for the 'Address' argument in the /Admin/CustomerReport.php file.

Which software is affected by CVE-2025-1171?

CVE-2025-1171 affects the Real Estate Property Management System version 1.0.

What type of vulnerability is CVE-2025-1171?

CVE-2025-1171 is a cross-site scripting (XSS) vulnerability.

What functionality is exploited in CVE-2025-1171?

CVE-2025-1171 exploits the functionality related to the 'Address' argument in the /Admin/CustomerReport.php file.