CVE-2025-2419: code-projects Real Estate Property Management System InsertFeedback.php sql injection

Published Mar 17, 2025

Updated

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /InsertFeedback.php. The manipulation of the argument txtName/txtEmail/txtMobile/txtFeedback leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Mar 17, 2025

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

May 25, 58462

Event

via NVD·11:46 AM

Frequently Asked Questions

What is the severity of CVE-2025-2419?

CVE-2025-2419 is classified as a critical vulnerability.

How do I fix CVE-2025-2419?

To fix CVE-2025-2419, ensure that user inputs are properly sanitized and implement prepared statements for database operations.

What type of vulnerability is CVE-2025-2419?

CVE-2025-2419 is an SQL injection vulnerability.

Where is CVE-2025-2419 found in the software?

CVE-2025-2419 is found in the file /InsertFeedback.php of the Real Estate Property Management System.

What functions are affected by CVE-2025-2419?

The functions handling the arguments txtName, txtEmail, txtMobile, and txtFeedback are affected by CVE-2025-2419.