CVE-2025-9592

5.5 mediumEPSS 0.5%

Medium (5.5) in admerc apartment management system. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2025-08-28
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

admerc:apartment_management_system

References

https://github.com/pjy2004/cve/issues/3
https://itsourcecode.com/
https://vuldb.com/?ctiid.321766
https://vuldb.com/?id.321766
https://vuldb.com/?submit.636178

Check your stack JSON