CVE-2025-9509

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0

Description: A security flaw exists in itsourcecode Apartment Management System version 1.0 related to the processing of the /report/fair info all.php file. Manipulation of the fid argument can lead to SQL injection. This issue can be exploited remotely, and an exploit has been publicly released.

Recommendations: As a temporary workaround, consider restricting access to the /report/fair info all.php file until a patch is available. Sanitize the fid argument before processing it in the /report/fair info all.php file.