A vulnerability identified as critical has been detected in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection.
This vulnerability appears as CVE-2025-14899. The attack may be initiated remotely. In addition, an exploit is available.
