CVE-2025-9643 MEDIUM

CVE-2025-9643: itsourcecode Apartment Management System utility_bill_setup.php sql injection

Vendor Itsourcecode

Product Apartment Management System

Weakness CWE-89 · SQLi

Published August 29, 2025

Last update August 29, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

August 29, 2025 CVE published

August 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-9643

Related vulnerabilities

04Related CVE

CVE-2025-5384 JeeWMS cgAutoListController.do CgAutoListController sql injection CVE-2025-10862 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id' CVE-2026-1129 Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection CVE-2024-4910 Campcodes Complete Web-Based School Management System student_exam_mark_insert_form1.php sql injection CVE-2025-6116 Das Parking Management System 停车场管理系统 API Search sql injection