CVE-2025-2384: code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument txtName/txtAddress/cmbCity/txtEmail/cmbGender/txtBirthDate/txtUserName2/txtPassword2 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2384?
CVE-2025-2384 is classified as a critical vulnerability affecting the Real Estate Property Management System.
How do I fix CVE-2025-2384?
To fix CVE-2025-2384, you should apply the latest security patches provided by the vendor for the Real Estate Property Management System.
Which components are affected by CVE-2025-2384?
CVE-2025-2384 affects the Parameter Handler component specifically in the file /InsertCustomer.php.
What kind of attacks can leverage CVE-2025-2384?
CVE-2025-2384 could potentially be exploited for unauthorized access or manipulation of user input data.
Is there a workaround for CVE-2025-2384?
One possible workaround for CVE-2025-2384 is to restrict access to the affected /InsertCustomer.php file until a patch can be applied.