CVE-2025-5611: CodeAstro Real Estate Management System submitpropertyupdate.php sql injection
Published Jun 4, 2025
·Updated
A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affects an unknown part of the file /submitpropertyupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Codeastro Real Estate Management System
Codeastro Real Estate Management System=1.0
Event History
Jun 4, 2025
CVE Published
via MITRE·08:31 PM
Data Sourced
via MITRE·08:31 PM
DescriptionSeverityWeakness
Aug 30, 57482
Event
via FIRST·09:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-5611?
CVE-2025-5611 is classified as a critical vulnerability.
2
How does CVE-2025-5611 affect the CodeAstro Real Estate Management System?
CVE-2025-5611 allows SQL injection through manipulation of the ID argument in the /submitpropertyupdate.php file.
3
Can CVE-2025-5611 be exploited remotely?
Yes, the vulnerability can be exploited remotely.
4
What versions of CodeAstro Real Estate Management System are affected by CVE-2025-5611?
CVE-2025-5611 affects version 1.0 of the CodeAstro Real Estate Management System.
5
How do I fix CVE-2025-5611?
To fix CVE-2025-5611, ensure proper input validation and sanitization to prevent SQL injection.