CVE-2025-14898: CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection
A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14898?
CVE-2025-14898 is classified as a critical vulnerability due to its potential to allow remote SQL injection attacks.
How do I fix CVE-2025-14898?
To fix CVE-2025-14898, it is recommended to validate and sanitize input to the /admin/userbuilderdelete.php file and implement prepared statements in database queries.
What does CVE-2025-14898 affect?
CVE-2025-14898 affects the CodeAstro Real Estate Management System 1.0, specifically targeting the Administrator Endpoint.
Can CVE-2025-14898 be exploited remotely?
Yes, CVE-2025-14898 can be exploited remotely, allowing attackers to perform SQL injection from anywhere.
What is the impact of exploiting CVE-2025-14898?
Exploiting CVE-2025-14898 can lead to unauthorized access to the database, data leakage, or data corruption.