CVE-2025-12614

MEDIUM

SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-12614 has a selected CVSS score of 5.1 (medium).

Description

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 3, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Best House Rental Management System

Browse SourceCodester / Best House Rental Management System
CVE List1.0affected

References

6
VDB-330908 | SourceCodester Best House Rental Management System admin_class.php delete_payment sql injectionvdb entryTechnical description
https://vuldb.com/?id.330908