A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
References
| Link | Resource |
|---|---|
| https://codeastro.com/ | Product |
| https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/userdelete-sqli.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.337425 | Permissions Required VDB Entry |
| https://vuldb.com/?id.337425 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.715672 | Third Party Advisory VDB Entry |
Configurations
History
24 Dec 2025, 15:01
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Codeastro
Codeastro real Estate Management System |
|
| CPE | cpe:2.3:a:codeastro:real_estate_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://codeastro.com/ - Product | |
| References | () https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/userdelete-sqli.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.337425 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.337425 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.715672 - Third Party Advisory, VDB Entry |
19 Dec 2025, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-19 01:16
Updated : 2025-12-24 15:01
NVD link : CVE-2025-14900
Mitre link : CVE-2025-14900
CVE.ORG link : CVE-2025-14900
JSON object : View
Products Affected
codeastro
- real_estate_management_system