A vulnerability classified as critical was found in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect.
This vulnerability is documented as CVE-2025-9848. The attack can be executed remotely. Additionally, an exploit exists.