Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:real_estate_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductReal Estate Management System (590451d6-6072-5d1b-8a38-d8bfaa127582)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9942 vulnerable 2026-06-03 15:14:40.169654 CodeAstro Real Estate Management System submitproperty.php unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /submitproperty.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-09-04T00:32:09.375Z
Updated: 2025-09-04T18:41:52.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9941 vulnerable 2026-06-03 15:14:40.169165 CodeAstro Real Estate Management System register.php unrestricted upload
MEDIUM (6.3)
A flaw has been found in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /register.php. Executing manipulation of the argument uimage can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2025-09-04T00:32:06.757Z
Updated: 2025-09-04T18:58:24.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9940 vulnerable 2026-06-03 15:14:40.168757 CodeAstro Real Estate Management System feature.php cross site scripting
LOW (3.5)
A vulnerability was detected in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /feature.php. Performing manipulation of the argument msg results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2025-09-04T00:02:09.306Z
Updated: 2025-09-04T14:03:31.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9939 vulnerable 2026-06-03 15:14:40.167059 CodeAstro Real Estate Management System propertyview.php cross site scripting
LOW (3.5)
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /propertyview.php. Such manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-09-04T00:02:06.522Z
Updated: 2025-09-04T14:05:04.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5611 vulnerable 2026-06-03 15:07:54.210513 CodeAstro Real Estate Management System submitpropertyupdate.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affects an unknown part of the file /submitpropertyupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T20:31:07.908Z
Updated: 2025-06-04T20:50:55.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5610 vulnerable 2026-06-03 15:07:54.210008 CodeAstro Real Estate Management System submitpropertydelete.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T20:31:05.994Z
Updated: 2025-06-04T20:50:29.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5583 vulnerable 2026-06-03 15:07:54.104549 CodeAstro Real Estate Management System register.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T09:31:05.606Z
Updated: 2025-06-04T13:24:41.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5582 vulnerable 2026-06-03 15:07:54.104026 CodeAstro Real Estate Management System profile.php sql injection
MEDIUM (6.3)
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T09:00:17.836Z
Updated: 2025-06-04T13:25:17.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5581 vulnerable 2026-06-03 15:07:54.103464 CodeAstro Real Estate Management System index.php sql injection
HIGH (7.3)
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T09:00:15.355Z
Updated: 2025-06-04T13:25:49.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5580 vulnerable 2026-06-03 15:07:54.101329 CodeAstro Real Estate Management System login.php sql injection
HIGH (7.3)
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T08:31:05.192Z
Updated: 2025-06-04T13:26:23.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14900 vulnerable 2026-06-03 14:58:56.124092 CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection
MEDIUM (4.7)
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-12-19T00:02:10.611Z
Updated: 2026-02-24T05:55:29.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14899 vulnerable 2026-06-03 14:58:56.123673 CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection
MEDIUM (4.7)
A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-19T00:02:08.232Z
Updated: 2026-02-24T05:55:16.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14898 vulnerable 2026-06-03 14:58:56.123144 CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection
MEDIUM (4.7)
A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-18T23:32:09.382Z
Updated: 2026-02-24T05:55:01.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14897 vulnerable 2026-06-03 14:58:56.121860 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection
MEDIUM (4.7)
A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-12-18T23:32:06.884Z
Updated: 2026-02-24T05:54:48.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1103 vulnerable 2026-06-03 14:54:26.188844 CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting
LOW (3.5)
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file profile.php of the component Feedback Form. The manipulation of the argument Your Feedback with the input <img src=x onerror=alert(document.cookie)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252458 is the identifier assigned to this vulnerability.
Published: 2024-01-31T15:00:06.875Z
Updated: 2025-06-17T21:29:19.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11058 vulnerable 2026-06-03 14:54:13.334484 CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection
MEDIUM (4.7)
A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-10T23:00:16.075Z
Updated: 2024-11-12T15:04:00.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11000 vulnerable 2026-06-03 14:54:13.130046 CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload
MEDIUM (4.7)
A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-08T08:00:10.354Z
Updated: 2024-11-08T14:22:49.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10999 vulnerable 2026-06-03 14:54:13.127227 CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload
MEDIUM (4.7)
A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-08T08:00:08.825Z
Updated: 2024-11-08T14:24:05.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0543 vulnerable 2026-06-03 14:54:02.914118 CodeAstro Real Estate Management System propertydetail.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertydetail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250713 was assigned to this vulnerability.
Published: 2024-01-15T05:31:04.333Z
Updated: 2025-06-17T21:19:14.060Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.