CVE-2025-14530: SourceCodester Real Estate Property Listing App property.php unrestricted upload
A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14530?
CVE-2025-14530 has been rated as critical due to the potential for unrestricted file uploads.
How do I fix CVE-2025-14530?
To address CVE-2025-14530, implement input validation and restrict file types that can be uploaded in the /admin/property.php functionality.
What impact does CVE-2025-14530 have on my system?
CVE-2025-14530 allows attackers to upload malicious files, leading to remote code execution on the affected system.
Is CVE-2025-14530 exploitable remotely?
Yes, CVE-2025-14530 can be exploited remotely, enabling unauthorized users to upload files without authentication.
Which application is affected by CVE-2025-14530?
CVE-2025-14530 affects SourceCodester Real Estate Property Listing App version 1.0.