CVE-2025-4481

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://github.com/hackerzhuo/CVE/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.308195Permissions Required, VDB Entry
• https://vuldb.com/?id.308195Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.566671Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

May 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4476A denial-of-service vulnerability has been identified in the…4.3
• CVE-2025-4477The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege …8.6
• CVE-2025-44779An issue in Ollama v0.1.33 allows attackers to delete arbitr…6.6
• CVE-2025-4478A flaw was found in the FreeRDP used by Anaconda's remote in…6.5
• CVE-2025-4479The ElementsKit Elementor Addons and Templates plugin for Wo…5.4
• CVE-2025-4480A vulnerability was found in code-projects Simple College Ma…7.8
• CVE-2025-4482A vulnerability classified as critical was found in Project …9.8
• CVE-2025-44823Nagios Log Server before 2024R1.3.2 allows authenticated use…8.8
• CVE-2025-44824Nagios Log Server before 2024R1.3.2 allows authenticated use…6.5
• CVE-2025-4483A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-44830EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulner…9.8
• CVE-2025-44831EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnera…9.8