CVE-2024-40475

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php...

CVE-2024-40475

CVE-2024-40475 affects SourceCodester Best House Rental Management System v1.0. The Red Hat and NVD/NVD-enriched records confirm an Incorrect Access Control vulnerability reachable at the REST/UI endpoints: “/rental/payment_report.php”, “/rental/balance_report.php”, “/rental/invoices.php”, “/rent...

PT-2024-28862 · Sourcecodester · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: The issue is related to Incorrect Access Control. It affects several API endpoints, including "/rental/payment report.php", "/rental/balance report.php",...