CVE-2024-11860

🗓️ 27 Nov 2024 16:31:05Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

Vulnerability in SourceCodester Best House Rental Management System 1.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-11860	27 Nov 202416:39	–	circl
CNNVD	SourceCodester Best House Rental Management System 安全漏洞	27 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization	27 Nov 202416:31	–	cvelist
EUVD	EUVD-2024-34006	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11860	27 Nov 202417:15	–	nvd
OSV	CVE-2024-11860	27 Nov 202417:15	–	osv
RedhatCVE	CVE-2024-11860	23 May 202507:50	–	redhatcve
Vulnrichment	CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization	27 Nov 202416:31	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

mayurik best_house_rental_management_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Best House Rental Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "POST Request Handler"
    ]
  }
]

Source	Link
drive	www.drive.google.com/file/d/1CyjtknGVqn5QO_R1WZX-hoGH8ae5DjRq/view
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
sourcecodester	www.sourcecodester.com/
github	www.github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Unauthorized%20Tenant%20Deletion.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
id	request body	rental/ajax.php?action=delete_tenant	Critical vulnerability allowing improper authorization via manipulation of the id parameter on the delete_tenant endpoint.	CWE-266, CWE-285

04 Dec 2024 21:08Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.5

CVSS 26.4

CVSS 46.9

CVSS 36.5

EPSS0.00117

SSVC