CVE-2025-1374: code-projects Real Estate Property Management System search.php sql injection

Published Feb 17, 2025

Updated

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /search.php. The manipulation of the argument StateName/CityName/AreaName/CatId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Feb 17, 2025

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-1374?

CVE-2025-1374 is classified as a critical vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-1374?

To fix CVE-2025-1374, sanitize and validate input parameters in the /search.php file to prevent SQL injection.

What type of vulnerability is CVE-2025-1374?

CVE-2025-1374 is an SQL injection vulnerability affecting the Real Estate Property Management System.

Which software is affected by CVE-2025-1374?

CVE-2025-1374 affects the Real Estate Property Management System version 1.0 developed by code-projects.

What are the consequences of exploiting CVE-2025-1374?

Exploiting CVE-2025-1374 can lead to unauthorized access to the database and manipulation of sensitive data.