CVE-2025-5610: CodeAstro Real Estate Management System submitpropertydelete.php sql injection

Published Jun 4, 2025

Updated

A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Codeastro Real Estate Management System

Codeastro Real Estate Management System=1.0

Event History

Jun 4, 2025

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionSeverityWeakness

Aug 30, 57482

Event

via FIRST·04:06 PM

Frequently Asked Questions

What is the severity of CVE-2025-5610?

CVE-2025-5610 has been classified as a critical vulnerability.

How does CVE-2025-5610 affect the CodeAstro Real Estate Management System?

CVE-2025-5610 affects the file /submitpropertydelete.php, which is susceptible to SQL injection due to improper handling of the argument ID.

What type of vulnerability is CVE-2025-5610?

CVE-2025-5610 is classified as an SQL injection vulnerability.

How can I mitigate CVE-2025-5610?

To mitigate CVE-2025-5610, validate and sanitize all user inputs to prevent injection attacks.

Who is affected by CVE-2025-5610?

Any user of CodeAstro Real Estate Management System version 1.0 may be affected by CVE-2025-5610.