CVE-2024-10999

CodeAstro Real Estate Management System 1.0 is affected by CVE-2024-10999 via an unrestricted upload vulnerability in the About Us page file /aboutadd.php, caused by the aimage parameter. The issue allows remote exploitation and has been publicly disclosed. No official patch details are provided ...

CVE-2024-11058

CVE-2024-11058 affects CodeAstro Real Estate Management System up to version 1.0. The vulnerability is an SQL injection in the About Us Page component, caused by improper handling of the id parameter in the /aboutedit.php file. It can be exploited remotely and, per public disclosures, an exploit ...

CVE-2024-0543

The CVE-2024-0543 entry affects CodeAstro Real Estate Management System versions up to 1.0. The vulnerability is a SQL injection in the propertydetail.php file caused by manipulation of the pid argument. It can be exploited remotely and exploits have been publicly disclosed. Connected documents c...

CVE-2024-11000

CVE-2024-11000 affects CodeAstro Real Estate Management System 1.0, where the argument aimage in /aboutedit.php enables unrestricted file upload. The vulnerability targets an unknown functionality, can be exploited remotely, and public disclosure exists. Connected sources consistently describe an...

CVE-2025-14900

CodeAstro Real Estate Management System 1.0 is affected. The vulnerability is an SQL injection in the Administrator Endpoint, caused by manipulation of the ID parameter in /admin/userdelete.php. Exploitation can be remote and a public exploit exists. The root cause is improper handling of the ID ...

CVE-2025-14898

CVE-2025-14898 affects CodeAstro Real Estate Management System 1.0. In the file /admin/userbuilderdelete.php of the Administrator Endpoint , there is an input handling flaw that enables SQL injection . The issue is exploitable remotely and the exploit has been publicly released. The Red Hat/ENISA...

CVE-2025-14899

CodeAstro Real Estate Management System 1.0 has a SQL injection vulnerability in the Administrator Endpoint, specifically the /admin/stateadd.php file. The weakness is tied to an unknown function, and the manipulation can be performed remotely, with exploits publicly available. Multiple trusted s...

CVE-2025-14897

CVE-2025-14897 affects CodeAstro Real Estate Management System 1.0, with the vulnerability located in the Administrator Endpoint’s /admin/useragentdelete.php function. The issue enables SQL injection via parameter handling in that file, allowing remote initiation. Public exploit code exists, indi...