CVE-2025-9644

CVE-2025-9644 affects the itsourcecode Apartment Management System 1.0. The vulnerability is in the file /setting/bill_setup.php where manipulating the txtBillType parameter can cause a SQL injection. It is described as remotely exploitable, and the exploit has been publicly disclosed. Practical ...

CVE-2025-9644 itsourcecode Apartment Management System bill_setup.php sql injection

A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/billsetup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The...