CVE-2025-9597: itsourcecode Apartment Management System rented_all_info.php sql injection
A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /odashboard/rentedallinfo.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9597?
CVE-2025-9597 is classified as a high severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-9597?
To fix CVE-2025-9597, sanitize all user input and use prepared statements or parameterized queries in the affected file /o_dashboard/rented_all_info.php.
What type of vulnerability is CVE-2025-9597?
CVE-2025-9597 is an SQL injection vulnerability affecting the itsourcecode Apartment Management System.
Can CVE-2025-9597 be exploited remotely?
Yes, CVE-2025-9597 can be exploited remotely, allowing attackers to manipulate SQL queries.
Which file is affected by CVE-2025-9597?
CVE-2025-9597 specifically impacts the file /o_dashboard/rented_all_info.php in the itsourcecode Apartment Management System.