CVE-2025-1197 Information

Description

A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/load_user-profile.php. The manipulation of the argument userhash leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Reference

https://code-projects.org/ https://github.com/YinshengLu/CVE/blob/main/cve3.pdf https://vuldb.com/?ctiid.295105 https://vuldb.com/?id.295105 https://vuldb.com/?submit.496856