CVE-2025-2384

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0

Description A critical issue was found in the Parameter Handler component of the file /InsertCustomer.php. The manipulation of the txtName, txtAddress, cmbCity, txtEmail, cmbGender, txtBirthDate, txtUserName2, and txtPassword2 arguments leads to sql injection. This issue can be exploited remotely.

Recommendations For code-projects Real Estate Property Management System version 1.0, consider restricting access to the /InsertCustomer.php file until a patch is available. As a temporary workaround, avoid using the vulnerable parameters in the affected component to minimize the risk of exploitation.