← CVE Intelligence

CVE-2025-9847

ScriptAndTools Real Estate Management System register.php unrestricted upload PUBLISHED

Description (CNA)

A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Affected (CNA)

Vendor / productVersions
ScriptAndTools / Real Estate Management Systemaffected 1.0

CWE

CWE-434, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.