CVE-2025-5709: code-projects Real Estate Property Management System InsertCategory.php sql injection

Published Jun 6, 2025

Updated

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unknown code of the file /Admin/InsertCategory.php. The manipulation of the argument txtCategoryName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Jun 6, 2025

CVE Published

via MITRE·01:31 AM

Data Sourced

via MITRE·01:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-5709?

CVE-2025-5709 is classified as a critical vulnerability due to its potential for SQL injection.

How does CVE-2025-5709 affect the Real Estate Property Management System?

CVE-2025-5709 affects the handling of the txtCategoryName parameter in the /Admin/InsertCategory.php file, making it vulnerable to SQL injection.

How can I fix CVE-2025-5709 in my application?

To fix CVE-2025-5709, you should validate and sanitize user inputs, particularly for the txtCategoryName parameter, and use prepared statements for database queries.

What kind of attack can exploit CVE-2025-5709?

CVE-2025-5709 can be exploited through SQL injection attacks that manipulate the txtCategoryName input.

Is there a specific version of the Real Estate Property Management System affected by CVE-2025-5709?

CVE-2025-5709 specifically affects version 1.0 of the Real Estate Property Management System.