2 matches found
Apartment Management System rented_info.php File SQL Injection Vulnerability
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter rsid in the file /report/rentedinfo.php. An attacker can exploit this...
CVE-2025-9508: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...