Vulnerability Description
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Admerc | Apartment Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/zzb1388/cve/issues/52ExploitIssue TrackingThird Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.321773Permissions Required
- https://vuldb.com/?id.321773Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.636365Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-9599?
CVE-2025-9599 is a vulnerability with a CVSS score of 7.3 (HIGH). A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation ...
How severe is CVE-2025-9599?
CVE-2025-9599 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9599?
Check the references section above for vendor advisories and patch information. Affected products include: Admerc Apartment Management System.