Approved changes feed: RSS · Atom

cpe:2.3:a:scriptandtools:real_estate_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorScriptandtools (0308c542-44a1-59cf-9b34-6f984a0e53c9)
ProductReal Estate Management System (7c797a69-dca8-5983-9f79-78a0c2d381c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/scriptandtools/real-estate-website-in-php purl2cpe 2026-06-01 10:13:25.737867

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9848 vulnerable 2026-06-08 07:47:10.046148 ScriptAndTools Real Estate Management System userlist.php redirect
HIGH (7.3)
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-09-03T01:02:10.151Z
Updated: 2025-09-03T20:16:02.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9847 vulnerable 2026-06-08 07:47:10.045777 ScriptAndTools Real Estate Management System register.php unrestricted upload
MEDIUM (6.3)
A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Published: 2025-09-03T01:02:07.659Z
Updated: 2025-09-03T20:23:04.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6329 vulnerable 2026-06-08 07:43:14.841528 ScriptAndTools Real Estate Management System User Delete userdelete.php authorization
MEDIUM (5.4)
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T09:31:07.446Z
Updated: 2025-06-20T13:51:04.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5128 vulnerable 2026-06-08 07:35:24.218567 ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-24T16:00:12.550Z
Updated: 2025-05-28T17:40:16.116Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.