CVE-2025-1170

Code-Projects Real Estate Property Management System 1.0 contains a cross-site scripting (XSS) vulnerability in an unknown function of /Admin/Category.php triggered by manipulating the Desc parameter. The issue can be exploited remotely and has been disclosed publicly. Affected products: Code-Pro...

CVE-2025-1195

CVE-2025-1195 concerns the Code-Projects Real Estate Property Management System 1.0. According to the sources, the vulnerability is triggered by manipulation of the CategoryId parameter in the /Admin/EditCategory endpoint, resulting in cross-site scripting (XSS). The issue is described as exploit...

CVE-2025-1171

CVE-2025-1171 affects Code-Projects Real Estate Property Management System 1.0. The vulnerability is an cross-site scripting (XSS) flaw in an unknown function of /Admin/CustomerReport.php, triggered by manipulating the Address parameter. It is exploitable remotely and the exploit has been disclos...

CVE-2025-5709

CVE-2025-5709 affects Code-projects Real Estate Property Management System 1.0, specifically the file /Admin/InsertCategory.php. The vulnerability arises from manipulation of the parameter txtCategoryName , leading to an SQL injection in unknown code paths. The attack is remote and the exploit is...

CVE-2025-1196

CVE-2025-1196 affects Code-Projects Real Estate Property Management System 1.0. The issue is a cross-site scripting vulnerability in an unknown function of /search.php triggered by manipulating the PropertyName parameter; the vulnerability is described as exploitable remotely. Other parameters ma...

CVE-2025-1374

CVE-2025-1374 affects code-projects Real Estate Property Management System 1.0. The vulnerability is in /search.php where manipulating parameters StateName, CityName, AreaName, or CatId allows SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Remediation/mit...

CVE-2025-5708

The CVE-2025-5708 entry affects code-projects Real Estate Property Management System 1.0, specifically the /Admin/NewsReport.php file. The root cause is improper handling of the txtFrom parameter, enabling SQL injection with remote attack potential. Public exploit/details have been disclosed. Pra...

CVE-2025-1197

Vulnerability: CVE-2025-1197 affects code-projects Real Estate Property Management System 1.0. Root cause: SQL injection via manipulated parameter userhash in the file /_parse/load_user-profile.php. Impact: confidentiality affected (high in CVSS 3.1), with broader concern for remote exploitation;...

CVE-2025-5704

CVE-2025-5704 affects code-projects Real Estate Property Management System 1.0. The vulnerability arises from improper handling of the txtUserName parameter in /Admin/User.php, enabling SQL injection. Exploitation could be remote and an exploit has been disclosed publicly. The available reference...

CVE-2025-2384

CVE-2025-2384 affects code-projects’ Real Estate Property Management System 1.0. The vulnerability lies in the Parameter Handler’s InsertCustomer.php, where manipulation of inputs such as txtName, txtAddress, cmbCity, txtEmail, cmbGender, txtBirthDate, txtUserName2, and txtPassword2 enables SQL i...

CVE-2025-5711

CVE-2025-5711 affects code-projects Real Estate Property Management System 1.0. Affected is an unknown function in /Admin/InsertCity.php where manipulating the cmbState argument enables SQL injection. Severity is high with remote exploitability and publicly disclosed exploit (PoC). Multiple sourc...

CVE-2025-5705

CVE-2025-5705 affects code-projects Real Estate Property Management System 1.0. The vulnerability is in an unknown function of the file /Admin/Property.php where manipulating the cmbCat parameter leads to SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. In...

CVE-2025-2419

The CVE-2025-2419 entry concerns code-projects Real Estate Property Management System 1.0. Affected is an unknown function in /InsertFeedback.php, where manipulating the txtName, txtEmail, txtMobile, or txtFeedback parameters enables SQL injection. Attacks are described as remote and publicly dis...

CVE-2025-5710

CVE-2025-5710 affects code-projects Real Estate Property Management System 1.0. The vulnerability is in the file /Admin/InsertState.php where manipulation of the txtStateName parameter can cause SQL injection. It is described as remotely exploitable and has been disclosed publicly. Several source...

CVE-2025-5756

CVE-2025-5756 describes a SQL injection vulnerability in Code-Projects Real Estate Property Management System 1.0, affecting the unknown functionality in the file /Admin/EditCity.php. The root cause is an incorrect operation within that file, enabling remote exploitation. The vulnerability has be...

CVE-2025-1576

CVE-2025-1576 affects Code-Projects Real Estate Property Management System 1.0. The vulnerability is an SQL injection in an unknown function of the file /ajax_state.php, caused by manipulating the StateName argument in a string. It is exploitable remotely, and the exploit has been disclosed publi...