CVE-2025-12597: SourceCodester Best House Rental Management System admin_class.php save_category sql injection
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function savecategory of the file /adminclass.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12597?
CVE-2025-12597 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-12597?
To address CVE-2025-12597, it is recommended to sanitize user inputs in the save_category function of the admin_class.php file.
What systems are affected by CVE-2025-12597?
CVE-2025-12597 affects the SourceCodester Best House Rental Management System version 1.0.
Can CVE-2025-12597 be exploited remotely?
Yes, CVE-2025-12597 can be exploited remotely through manipulation of the argument Name.
What type of attack does CVE-2025-12597 enable?
CVE-2025-12597 enables SQL injection attacks through an unprotected function in the application.