CNNVD-202512-3722 Information
CNNVD ID
CNNVD-202512-3722
Related CVE
- CNNVD Published: 2025-12-19
Description (Chinese)
CodeAstro Real Estate Management System是CodeAstro公司的一个房地产管理系统。 CodeAstro Real Estate Management System 1.0版本存在SQL注入漏洞，该漏洞源于对文件/admin/userbuilderdelete.php中参数的错误操作，可能导致SQL注入攻击。
Description (English)
CodeAstro Real Estate Management System is a real estate management system for CodeAstro. The CodeAstro Real Estate Management System Version 1.0 contains an injection loophole in SQL, which stems from the erroneous operation of the parameters in the document/admin/userbuilderdelete.php and may lead to an attack on SQL injection.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
CodeAstro
Published
2025-12-19
Last Modified
2026-02-24
References
https://codeastro.com/ https://vuldb.com/?ctiid.337423 https://vuldb.com/?submit.715670 https://vuldb.com/?id.337423 https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli-userbuilderdelete.php.md https://access.redhat.com/security/cve/cve-2025-14898
Share on: