CVE-2025-9645: falha de média gravidade em itsourcecode Apartment Management System
itsourcecode Apartment Management System r_all_info.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Apartment Management SystemCVEs relacionadas — itsourcecode Apartment Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9419MEDIUMitsourcecode Apartment Management System addunit.php sql injectionEPSS 0.6%CVE-2025-9421MEDIUMitsourcecode Apartment Management System addcomplain.php sql injectionEPSS 0.6%CVE-2025-9420MEDIUMitsourcecode Apartment Management System addfloor.php sql injectionEPSS 0.6%CVE-2025-9418MEDIUMitsourcecode Apartment Management System addowner.php sql injectionEPSS 0.6%CVE-2025-9471MEDIUMitsourcecode Apartment Management System add_maintenance_cost.php sql injectionEPSS 0.5%CVE-2025-9470MEDIUMitsourcecode Apartment Management System add_m_committee.php sql injectionEPSS 0.5%