CVE-2025-9469: itsourcecode Apartment Management System add_fund.php sql injection
A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/addfund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9469?
CVE-2025-9469 is classified as a critical severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-9469?
To fix CVE-2025-9469, sanitize and validate all inputs to the /fund/add_fund.php file to prevent SQL injection attacks.
What systems are affected by CVE-2025-9469?
The affected system by CVE-2025-9469 is the itsourcecode Apartment Management System version 1.0.
Can CVE-2025-9469 be exploited remotely?
Yes, CVE-2025-9469 can be exploited remotely by manipulating the ID argument during the SQL query.
What type of vulnerability is CVE-2025-9469?
CVE-2025-9469 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.