CVE-2025-5710: code-projects Real Estate Property Management System InsertState.php sql injection

Published Jun 6, 2025

Updated

A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/InsertState.php. The manipulation of the argument txtStateName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Jun 6, 2025

CVE Published

via MITRE·01:31 AM

Data Sourced

via MITRE·01:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-5710?

CVE-2025-5710 is classified as critical due to its potential to allow SQL injection.

How do I fix CVE-2025-5710?

To fix CVE-2025-5710, sanitize and validate all user inputs, particularly the argument txtStateName in the /Admin/InsertState.php file.

What are the potential impacts of exploiting CVE-2025-5710?

Exploiting CVE-2025-5710 could allow an attacker to execute arbitrary SQL commands, potentially compromising the database.

Which software is affected by CVE-2025-5710?

CVE-2025-5710 affects version 1.0 of the Real Estate Property Management System developed by code-projects.

Is there a patch available for CVE-2025-5710?

Currently, a specific patch has not been released for CVE-2025-5710; users should implement input validation as a workaround.