4 matches found
CVE-2025-5610
CodeAstro Real Estate Management System 1.0 contains a SQL injection vulnerability in the /submitpropertydelete.php file, caused by unsafely manipulating the ID parameter. The issue is exploitable remotely, with exploitation details disclosed publicly. Multiple sources corroborate the existence a...
CVE-2025-5611
CodeAstro Real Estate Management System 1.0 is affected by CVE-2025-5611 due to SQL injection in /submitpropertyupdate.php caused by manipulation of the ID parameter. Exploitation can be remote; multiple sources note disclosure of exploits and public availability. The Connected documents do not p...
CVE-2025-9942
CVE-2025-9942 affects CodeAstro Real Estate Management System 1.0. The vulnerability is in an unknown function of the file /submitproperty.php, which allows unrestricted file uploads. The issue can be exploited remotely, and public disclosure exists. Practical impact is unrestricted uploads, pote...
CVE-2025-9941
CVE-2025-9941 affects CodeAstro Real Estate Management System 1.0, with the vulnerability in /register.php caused by manipulation of the uimage parameter, leading to unrestricted file uploads. The issue can be exploited remotely, and public exploits have been published. The vulnerability is discu...