CVE-2025-9594

CriticalCVSS 9.8/10Last modified Sep 26, 2026

Description

A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Apartment Management System	1.0

References

https://github.com/pjy2004/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
https://itsourcecode.com/Product
https://vuldb.com/?ctiid.321768Permissions Required
https://vuldb.com/?id.321768Third Party Advisory, VDB Entry
https://vuldb.com/?submit.636187Third Party Advisory, VDB Entry

Timeline

Published: Aug 28, 2025
Last modified: Sep 26, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-95956.1A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the fil CVE-2025-95969.8A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This m CVE-2025-95979.8A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/re CVE-2025-95989.8A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/ye CVE-2025-95999.8A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality o CVE-2025-96009.8A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functiona CVE-2025-96019.8A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_sal CVE-2025-96026.5A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulati CVE-2025-96039.8A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cg CVE-2025-96043.7A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/enc CVE-2025-96059.8A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /go CVE-2025-96068.8A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intr