CVE-2025-5708: code-projects Real Estate Property Management System NewsReport.php sql injection

Published Jun 6, 2025

Updated

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Jun 6, 2025

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-5708?

CVE-2025-5708 is classified as a critical vulnerability.

How does CVE-2025-5708 impact the Real Estate Property Management System?

CVE-2025-5708 allows for SQL injection through the manipulation of the argument txtFrom in the /Admin/NewsReport.php file.

How do I fix CVE-2025-5708?

To fix CVE-2025-5708, you should sanitize user input and use prepared statements to prevent SQL injection.

What versions of the Real Estate Property Management System are affected by CVE-2025-5708?

CVE-2025-5708 affects all versions of the Real Estate Property Management System prior to applying the security patch.

Is it necessary to update immediately for CVE-2025-5708?

Yes, it is highly recommended to update immediately to mitigate the risks associated with CVE-2025-5708.