CVE-2025-9848 - CVE House
Back to Database
Status published Medium CVE-2025-9848

ScriptAndTools Real Estate Management System userlist.php redirect

Vulnerability Description

A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9848

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Maloy Roy Orko
  • MaloyRoyOrko (VulDB User)

References

More from ScriptAndTools

View All →
CVE-2025-9847
ScriptAndTools Real Estate Management System register.php unrestricted upload
Medium 5.3
CVE-2025-6329
ScriptAndTools Real Estate Management System User Delete userdelete.php authorization
Medium 5.3
CVE-2025-5128
ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
Medium 6.9
CVE-2025-4067
ScriptAndTools Online-Travling-System viewpackage.php access control
Medium 6.9
CVE-2025-4066
ScriptAndTools Online-Travling-System addpackage.php access control
Medium 6.9

Affected Vendor

ScriptAndTools

View all reports →

Affected Software

Real Estate Management System
Vulnerable Versions:
1.0

Timeline

Official Publish: September 3rd, 2025
Last Modified: September 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-698 CWE-705

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.