CVE-2025-12226

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Best House Rental Management System	1.0

References

https://github.com/zhang947/vul/blob/main/report.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.329896Permissions Required, VDB Entry
https://vuldb.com/?id.329896Third Party Advisory, VDB Entry
https://vuldb.com/?submit.673611Third Party Advisory, VDB Entry
https://vuldb.com/?submit.674055Not Applicable
https://vuldb.com/?submit.675883Not Applicable
https://www.sourcecodester.com/Product

Timeline

Published: Oct 27, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-122275.4A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /ad CVE-2025-122284.8A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /publ CVE-2025-122294.8A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/adm CVE-2025-12236.1An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Clie CVE-2025-122304.8A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/cu CVE-2025-122314.8A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /publ CVE-2025-122329.8A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/CVE-2025-122338.8A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Exe CVE-2025-122348.8A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The man CVE-2025-122358.0A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The ma CVE-2025-122368.8A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient.CVE-2025-122379.8A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.p