CVE-2024-3719: A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id ...

Summary

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	house_rental_management_system	1.0 `cpe:2.3:a:campcodes:house_rental_management_system:1.0:::::::*`

Original advisory text

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id ...

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260571.

References

https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System/... Exploit
https://vuldb.com/?ctiid.260571 Permissions Required VDB Entry
https://vuldb.com/?id.260571 Permissions Required VDB Entry
https://vuldb.com/?submit.314205 Third Party Advisory VDB Entry