6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Basic Information
ID
CVE-2025-12208
Source
VulDB
Published
Oct 27, 2025 at 03:02
Affected Product
Vendor
SourceCodester
Product
Best House Rental Management System
Version
1.0
Affected Versions
SourceCodester Best House Rental Management System 1.0