CVE-2025-14897: CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection
A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14897?
CVE-2025-14897 is classified as a high severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-14897?
To fix CVE-2025-14897, update or patch the CodeAstro Real Estate Management System to a version that addresses the SQL injection vulnerability.
What component is affected by CVE-2025-14897?
CVE-2025-14897 affects the Administrator Endpoint component in the file /admin/useragentdelete.php.
Can CVE-2025-14897 be exploited remotely?
Yes, CVE-2025-14897 can be exploited remotely, allowing attackers to perform SQL injection attacks from outside the system.
What type of attack is associated with CVE-2025-14897?
CVE-2025-14897 is associated with SQL injection attacks, which can manipulate database queries to gain unauthorized access.