CVE-2025-9730: itsourcecode Apartment Management System updateProfile.php sql injection
A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9730?
CVE-2025-9730 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9730?
To fix CVE-2025-9730, you should validate and sanitize user input to prevent SQL injection and update to the latest version of the Apartment Management System.
Who is affected by CVE-2025-9730?
CVE-2025-9730 affects users of the itsourcecode Apartment Management System version 1.0.
What type of attack can be executed using CVE-2025-9730?
The vulnerability CVE-2025-9730 allows for SQL injection attacks which can lead to unauthorized data access.
Can CVE-2025-9730 be exploited remotely?
Yes, CVE-2025-9730 can be exploited remotely, making it imperative to secure affected systems immediately.