PT-2025-34831 · Itsourcecode · Apartment Management System

Zzb1

·

CVE-2025-9508

·

Published

2025-08-27

·

Updated

2025-09-01

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0
Description: A vulnerability exists in itsourcecode Apartment Management System version 1.0. The issue is a SQL injection affecting an unknown function within the /report/rented info.php file. The rsid argument is susceptible to manipulation, allowing for remote exploitation. The exploit is publicly available.
Recommendations: As a temporary workaround, consider restricting access to the /report/rented info.php file until a fix is available. Sanitize the rsid argument to prevent SQL injection.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-9508

Affected Products

Apartment Management System