CVE-2025-14899: CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection
A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14899?
CVE-2025-14899 has a high severity due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-14899?
To fix CVE-2025-14899, validate and sanitize all user inputs in the /admin/stateadd.php file to prevent SQL injection.
What components are affected by CVE-2025-14899?
CVE-2025-14899 impacts the Administrator Endpoint of the CodeAstro Real Estate Management System 1.0.
Can CVE-2025-14899 be exploited remotely?
Yes, CVE-2025-14899 can be exploited remotely, allowing attackers to execute SQL commands.
What are the potential impacts of CVE-2025-14899?
The potential impacts of CVE-2025-14899 include unauthorized data access, data manipulation, and possible system compromise.