CVE-2025-9598 – Apache Management System SQL Injection

CVE ID : CVE-2025-9598

Published : Aug. 29, 2025, 12:15 a.m. | 29 minutes ago

Description : A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…