CVE-2025-9792: falha de média gravidade em itsourcecode Apartment Management System
itsourcecode Apartment Management System e_all_info.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard/e_all_info.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Apartment Management SystemCVEs relacionadas — itsourcecode Apartment Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9419MEDIUMitsourcecode Apartment Management System addunit.php sql injectionEPSS 0.6%CVE-2025-9421MEDIUMitsourcecode Apartment Management System addcomplain.php sql injectionEPSS 0.6%CVE-2025-9420MEDIUMitsourcecode Apartment Management System addfloor.php sql injectionEPSS 0.6%CVE-2025-9418MEDIUMitsourcecode Apartment Management System addowner.php sql injectionEPSS 0.6%CVE-2025-9471MEDIUMitsourcecode Apartment Management System add_maintenance_cost.php sql injectionEPSS 0.5%CVE-2025-9470MEDIUMitsourcecode Apartment Management System add_m_committee.php sql injectionEPSS 0.5%