Vulnerability Description
A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax_state.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fabian | Real Estate Property Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://code-projects.org/Product
- https://github.com/fjl1113/cve/blob/main/sql-fjl.mdExploitThird Party Advisory
- https://vuldb.com/?ctiid.296551Permissions RequiredVDB Entry
- https://vuldb.com/?id.296551VDB Entry
- https://vuldb.com/?submit.502071VDB Entry
FAQ
What is CVE-2025-1576?
CVE-2025-1576 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax_state.php. Th...
How severe is CVE-2025-1576?
CVE-2025-1576 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1576?
Check the references section above for vendor advisories and patch information. Affected products include: Fabian Real Estate Property Management System.