CVE-2025-1576
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Feb 23, 2025
Updated: Mar 3, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-1576 is a critical vulnerability affecting the Real Estate Property Management System 1.0. This issue lies within an unknown functionality of the file /ajax_state.php, which can be exploited through manipulation of the StateName argument as part of a string input. The exploit allows for sql injection, enabling remote attacks. The vulnerability has been disclosed to the public, increasing the risk of potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Real Estate Property Management System
Affected Vendors
- Code Projects