CVE-2025-5711: code-projects Real Estate Property Management System InsertCity.php sql injection

Published Jun 6, 2025

Updated

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/InsertCity.php. The manipulation of the argument cmbState leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Fabian Real Estate Property Management System=1.0

Event History

Jun 6, 2025

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-5711?

CVE-2025-5711 is classified as a critical vulnerability due to its potential for SQL injection.

How does CVE-2025-5711 affect the Real Estate Property Management System?

CVE-2025-5711 allows for SQL injection through manipulated input in the cmbState argument of the /Admin/InsertCity.php file.

What are the potential consequences of exploiting CVE-2025-5711?

Exploiting CVE-2025-5711 could lead to unauthorized access to the database, data leakage, or data modification.

How do I fix CVE-2025-5711?

To fix CVE-2025-5711, sanitize and validate all user inputs to prevent SQL injection vulnerabilities.

Is there a patch available for CVE-2025-5711?

Currently, there is no specific patch mentioned for CVE-2025-5711, so implementing input validation is crucial.