CVE-2024-3698: A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_payment.ph...

Summary

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_payment.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	house_rental_management_system	1.0 `cpe:2.3:a:campcodes:house_rental_management_system:1.0:::::::*`

Original advisory text

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_payment.ph...

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_payment.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260485 was assigned to this vulnerability.

References

https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System/... Exploit
https://vuldb.com/?ctiid.260485 Permissions Required VDB Entry
https://vuldb.com/?id.260485 Permissions Required VDB Entry
https://vuldb.com/?submit.314204 Third Party Advisory VDB Entry