CNNVD-202512-3723 Information

CNNVD ID

CNNVD-202512-3723

CVE-2025-14897

  • CNNVD Published: 2025-12-19

Description (Chinese)

CodeAstro Real Estate Management System是CodeAstro公司的一个房地产管理系统。 CodeAstro Real Estate Management System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/admin/useragentdelete.php中参数的错误操作,可能导致SQL注入攻击。

Description (English)

CodeAstro Real Estate Management System is a real estate management system for CodeAstro. The CodeAstro Real State Management System Version 1.0 contains an injection loophole in SQL, which stems from the error of the parameters in the document/admin/useragentdelete.php, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

CodeAstro

Published

2025-12-19

Last Modified

2026-02-24

References

https://vuldb.com/?submit.715668 https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli-useragentdelete.md https://codeastro.com/ https://vuldb.com/?ctiid.337422 https://vuldb.com/?id.337422 https://access.redhat.com/security/cve/cve-2025-14897

Share on: