github.comexploit
https://github.com/321190176/Best-house-rental-management-system-2/blob/main/report.md CVE-2025-12598
MEDIUM
SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection
Record summary
CVE-2025-12598 has a selected CVSS score of 5.1 (medium).
Description
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Other parameters might be affected as well.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 3, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Best House Rental Management SystemBrowse SourceCodester / Best House Rental Management System | CVE List | 1.0 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-12598 VDB-330893 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.330893 VDB-330893 | SourceCodester Best House Rental Management System admin_class.php save_tenant sql injectionvdb entryTechnical description
https://vuldb.com/?id.330893 Submit #678086 | sourcecodester Best house rental management system 1.0 SQL InjectionThird-party advisory
https://vuldb.com/?submit.678086 sourcecodester.comproduct
https://www.sourcecodester.com/