CVE-2025-12598: SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function savetenant of the file /adminclass.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12598?
CVE-2025-12598 is considered a critical vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-12598?
To fix CVE-2025-12598, sanitize and validate all user inputs, particularly the 'firstname' argument in the save_tenant function.
What software is affected by CVE-2025-12598?
CVE-2025-12598 affects SourceCodester Best House Rental Management System version 1.0.
Can CVE-2025-12598 be exploited remotely?
Yes, CVE-2025-12598 can be exploited remotely by manipulating the 'firstname' argument.
What type of vulnerability is CVE-2025-12598?
CVE-2025-12598 is classified as a SQL injection vulnerability.