CVE-2025-12853

MEDIUM

SourceCodester Best House Rental Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

References (5)

Core 5

Core References

Product product

https://www.sourcecodester.com/

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.331499

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.331499

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.679152

Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking

https://github.com/Cashbeebee/CVE/issues/2

Scores

CVSS v3 4.7

EPSS 0.0003

EPSS Percentile 7.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-74 CWE-89

Status published

Products (1)

mayurik/best_house_rental_management_system 1.0

Published Nov 07, 2025

Tracked Since Feb 18, 2026