Vulnerabilidades do Codeastro Real Estate Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Codeastro Real Estate Management System: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:codeastro:real_estate_management_system
CVE-2025-14900
Alta · 7.2
CWE-74 18/12/2025
CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-14899
Alta · 7.2
CWE-74 18/12/2025
CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection
A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-14898
Alta · 7.2
CWE-74 18/12/2025
CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection
A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-14897
Alta · 7.2
CWE-74 18/12/2025
CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection
A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.