CVE-2025-9593 MEDIUM

CVE-2025-9593: itsourcecode Apartment Management System unit_status_info.php sql injection

Vendor Itsourcecode

Product Apartment Management System

Weakness CWE-89 · SQLi

Published August 28, 2025

Last update August 29, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Key dates

02Disclosure timeline

August 28, 2025 CVE published

August 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-9593 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter CVE-2022-45822 WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL Injection CVE-2026-2172 code-projects Online Application System for Admission Login Endpoint index.php sql injection CVE-2023-3820 SQL Injection in pimcore/pimcore CVE-2023-1016 Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection