CVE-2025-5582: CodeAstro Real Estate Management System profile.php sql injection

Published Jun 4, 2025

Updated

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Codeastro Real Estate Management System

Codeastro Real Estate Management System=1.0

Event History

Jun 4, 2025

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Aug 30, 57482

Event

via FIRST·08:40 AM

Frequently Asked Questions

What is the severity of CVE-2025-5582?

The severity of CVE-2025-5582 is rated as critical due to the potential for remote SQL injection.

How do I fix CVE-2025-5582?

To fix CVE-2025-5582, it's recommended to implement proper input validation and parameterized queries to prevent SQL injection.

Which software is affected by CVE-2025-5582?

CVE-2025-5582 affects the CodeAstro Real Estate Management System version 1.0.

Can CVE-2025-5582 be exploited remotely?

Yes, CVE-2025-5582 allows attackers to initiate SQL injection attacks remotely.

What type of attack does CVE-2025-5582 facilitate?

CVE-2025-5582 facilitates SQL injection attacks through manipulation of the content argument in the file /profile.php.