PT-2025-34830 · Itsourcecode · Apartment Management System

·

CVE-2025-9507

·

Published

2025-08-27

·

Updated

2025-09-01

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0
Description: A weakness exists in itsourcecode Apartment Management System 1.0, specifically within an unknown function of the file /report/visitor info.php. Manipulation of the vid argument can lead to SQL injection, allowing for remote exploitation. The exploit has been made publicly available.
Recommendations: As a temporary workaround, consider restricting access to the /report/visitor info.php file until a fix is available. Sanitize the vid argument to prevent SQL injection attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-9507

Affected Products

Apartment Management System