CVE-2025-9601: itsourcecode Apartment Management System employee_salary_setup.php sql injection
A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employeesalarysetup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9601?
CVE-2025-9601 is classified as a high severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2025-9601?
To fix CVE-2025-9601, validate and sanitize all user inputs, particularly the ddlEmpName parameter, to prevent SQL injection.
What systems are affected by CVE-2025-9601?
CVE-2025-9601 affects itsourcecode Apartment Management System version 1.0.
Can CVE-2025-9601 be exploited remotely?
Yes, CVE-2025-9601 can be exploited remotely by attackers targeting the vulnerable script.
What type of vulnerability is CVE-2025-9601?
CVE-2025-9601 is an SQL injection vulnerability that allows attackers to manipulate database queries.