A vulnerability categorized as critical has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection.
This vulnerability is reported as CVE-2025-14898. The attack can be launched remotely. Moreover, an exploit is present.