CVE-2025-1576: code-projects Real Estate Property Management System ajax_state.php sql injection

Published Feb 23, 2025

Updated

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Feb 23, 2025

CVE Published

via MITRE·04:31 AM

Data Sourced

via MITRE·04:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-1576?

CVE-2025-1576 is classified as a critical vulnerability.

How does CVE-2025-1576 affect the Real Estate Property Management System?

CVE-2025-1576 allows for SQL injection through the manipulation of the StateName argument in /ajax_state.php.

What versions of the Real Estate Property Management System are affected by CVE-2025-1576?

CVE-2025-1576 affects Real Estate Property Management System version 1.0.

How can I mitigate the risks associated with CVE-2025-1576?

To mitigate CVE-2025-1576, validate and sanitize all inputs to prevent SQL injection attacks.

Is there a patch available for CVE-2025-1576?

As of now, there has been no official patch released for CVE-2025-1576.