CVE-2025-12853: SourceCodester Best House Rental Management System admin_class.php delete_house sql injection
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function deletehouse of the file /adminclass.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12853?
CVE-2025-12853 is classified as a critical SQL injection vulnerability that can be exploited remotely.
How do I fix CVE-2025-12853?
To fix CVE-2025-12853, sanitize user input in the delete_house function within the admin_class.php file to prevent SQL injection.
What software is affected by CVE-2025-12853?
CVE-2025-12853 affects SourceCodester Best House Rental Management System version 1.0.
What type of attack is associated with CVE-2025-12853?
CVE-2025-12853 is associated with a remote SQL injection attack due to improper handling of input parameters.
What is the impact of exploiting CVE-2025-12853?
Exploiting CVE-2025-12853 could allow an attacker to manipulate database queries and potentially access sensitive data.