CVE-2025-12614: SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function deletepayment of the file /adminclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12614?
CVE-2025-12614 has a high severity rating due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-12614?
To remediate CVE-2025-12614, sanitize and validate input data in the delete_payment function and implement prepared statements for database queries.
What systems are affected by CVE-2025-12614?
CVE-2025-12614 affects SourceCodester Best House Rental Management System version 1.0.
What type of vulnerability is CVE-2025-12614?
CVE-2025-12614 is classified as an SQL injection vulnerability.
Can CVE-2025-12614 be exploited remotely?
Yes, CVE-2025-12614 can be exploited remotely, allowing attackers to manipulate the system via SQL injection.