CVE-2025-9599: itsourcecode Apartment Management System month_setup.php sql injection
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9599?
The severity of CVE-2025-9599 is categorized as high due to its potential for SQL injection attacks.
How can I fix CVE-2025-9599?
To fix CVE-2025-9599, sanitize and validate user inputs in the /setting/month_setup.php file, specifically the txtMonthName parameter.
What systems are affected by CVE-2025-9599?
CVE-2025-9599 affects the itsourcecode Apartment Management System version 1.0.
What type of vulnerability is CVE-2025-9599?
CVE-2025-9599 is classified as an SQL injection vulnerability.
Can CVE-2025-9599 lead to data breaches?
Yes, if exploited, CVE-2025-9599 can lead to unauthorized access to the database, resulting in potential data breaches.