CVE-2025-3142

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely...

CVE-2025-3120

The CVE describes an SQL injection in SourceCodester Apartment Visitors Management System 1.0 via the apartmentno parameter in /add-apartment.php. Exploitation can be remote and the vulnerability may affect multiple parameters. Exploitation status is not consistently documented across connected s...