CVE-2025-9469

5.5 mediumEPSS 0.5%

Medium (5.5) in admerc apartment management system. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/add_fund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2025-08-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

admerc:apartment_management_system

References

https://github.com/zhuyi-hz/cve/issues/14
https://itsourcecode.com/
https://vuldb.com/?ctiid.321334
https://vuldb.com/?id.321334
https://vuldb.com/?submit.634080

Check your stack JSON