CVE-2025-12208: SourceCodester Best House Rental Management System admin_class.php login2 sql injection
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12208?
CVE-2025-12208 is considered a high-severity vulnerability due to potential SQL injection risks.
How do I fix CVE-2025-12208?
To fix CVE-2025-12208, sanitize and validate all user inputs in the login function to prevent SQL injection.
Which systems are affected by CVE-2025-12208?
CVE-2025-12208 affects SourceCodester Best House Rental Management System version 1.0.
Can CVE-2025-12208 be exploited remotely?
Yes, CVE-2025-12208 can be exploited remotely by manipulating the Username parameter.
What is the impact of CVE-2025-12208?
The impact of CVE-2025-12208 allows attackers to perform unauthorized SQL queries, potentially compromising the database.