Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•2 views

CVE-2025-9599: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•2 views

CVE-2025-9644: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/billsetup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.6AI score0.00401EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•1 views

CVE-2025-9598: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/yearsetup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released t...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•1 views

CVE-2025-9592: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/billinfo.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

9.8CVSS5.6AI score0.00505EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/27 5:15 a.m.•14 views

CVE-2025-9509

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/27 4:32 a.m.•5 views

CVE-2025-9509 itsourcecode Apartment Management System fair_info_all.php sql injection

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.6AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-9509: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/26 12:00 a.m.•1 views

CVE-2025-9469: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/addfund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public an...

9.8CVSS5.7AI score0.00525EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/26 12:00 a.m.•1 views

CVE-2025-9468: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /bill/addbill.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS5.6AI score0.00525EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•2 views

CVE-2025-9419: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be...

9.8CVSS5.7AI score0.00567EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/21 5:02 p.m.•36 views

CVE-2025-9311

CVE-2025-9311 affects itsourcecode’s Apartment Management System 1.0. The vulnerability resides in the /fair/addfair.php file, where the argument ID can be manipulated to perform a SQL injection, enabling remote exploitation. Public exploits exist and are noted in multiple sources. A practical re...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder