Description
A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as critical. This vulnerability affects unknown code of the component Listing Handler. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Summer Pearl Group | Vacation Rental Management Platform | 1.0.0, 1.0.1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
vulnvault/react2shell ★ 0 · Dec 31, 2025
Official Walkthrough for lab React2Shell: CVE-2025-5182
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VDB-310270 | Summer Pearl Group Vacation Rental Management Platform Listing authorization vdb-entry
- VDB-310270 | CTI Indicators (IOB, IOC) signature permissions-required
- https://github.com/Stolichnayer/Summer-Pearl-Group-IDOR-XSS related
- https://summerpearlgroup.gr/spgpm/releases patch
- https://www.youtube.com/watch?v=0wwuatTa6sU media-coverage