CVE-2025-3120: SourceCodester Apartment Visitors Management System add-apartment.php sql injection
First published: Wed Apr 02 2025(Updated: )
A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Apartment Visitors Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-3120?
CVE-2025-3120 has been rated as critical due to its potential for SQL injection vulnerabilities.
How does CVE-2025-3120 affect the software?
CVE-2025-3120 affects the SourceCodester Apartment Visitors Management System by allowing SQL injection through the manipulation of the 'apartmentno' argument in the /add-apartment.php file.
What is the potential impact of exploiting CVE-2025-3120?
Exploiting CVE-2025-3120 may allow attackers to execute arbitrary SQL queries on the database, potentially leading to data breach or loss.
How can I fix CVE-2025-3120?
To fix CVE-2025-3120, ensure that all user inputs, particularly the 'apartmentno' argument, are properly sanitized and validated to prevent SQL injection.
What versions of the software are affected by CVE-2025-3120?
CVE-2025-3120 impacts the SourceCodester Apartment Visitors Management System version 1.0.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/sourcecodester
- canonical/sourcecodester apartment visitors management system