A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · admercNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:admerc:apartment_management_system:1.0:*:*:*:*:*:*:*
References 5
- https://github.com/zzb1388/cve/issues/49 Exploit, Issue Tracking
- https://itsourcecode.com/ Product
- https://vuldb.com/?ctiid.321850 Permissions Required, VDB Entry
- https://vuldb.com/?id.321850 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.636371 Third Party Advisory, VDB Entry