570 matches found
CVE-2024-6043
CVE-2024-6043 CVE-2024-6043 نظرة عامة تستغل هذه الأداة المكتوبة بلغة بايثون الثغرة CVE-2024-6043، التي تؤثر على نظام SourceCodester Best House Rental Management System الإصدار 1.0. تسمح هذه الثغرة للمهاجمين عن بُعد بتنفيذ حقن SQL عبر ملف adminclass.php، وتستهدف تحديدًا معامل username في دالة تسجي...
CVE-2021-25790-Multiple-Stored-XSS
CVE-2021-25790-Multiple-Stored-XSS: ثغرات XSS مخزنة متعددة في برنامج House Rental and Property Listing V1.0. رابط البرنامج: https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790...
CVE-2024-39210
معرف CVE CVE-2024-39210 المنتج Best house rental management system الإصدار =1.0 نوع المشكلة التحكم غير الصحيح في الوصول الوصف تم اكتشاف أن نظام Best House Rental Management System الإصدار v1.0 يحتوي على ثغرة قراءة ملفات عشوائية عبر معامل Page في index.php. تسمح هذه الثغرة للمهاجمين بقراءة ملفات P...
CVE-2024-46377
CVE-2024-46377 إثبات المفهوم لثغرة رفع الملفات التعسفية في Best House Rental Management System 1.0 نظرة عامة يشرح هذا السكريبت بلغة بايثون كيفية استغلال ثغرة رفع الملفات التعسفية في Best House Rental Management System 1.0. تسمح الثغرة للمهاجم برفع ملف ضار مثل قشرة ويب PHP وتنفيذ أوامر تعسفية على...
CVE-2026-12776
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2026-12775
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...
CVE-2026-12776 Montodel House-Rental-Management index.php houses sql injection
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2026-12776
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
EUVD-2026-38142
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2026-12776
Montodel House-Rental-Management is affected by an SQL injection in /index.php?page=houses triggered by manipulating the ID parameter. The flaw affects the application as a whole with a remote-access exploit published and the vendor pursuing a rolling-release strategy, making exact affected versi...
CVE-2026-12775
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...
EUVD-2026-38141
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...
CVE-2026-12775 Montodel House-Rental-Management login.php sql injection
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...
PT-2026-51200
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2026-12776: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...
PT-2026-51199
Name of the Vulnerable Software and Affected Versions Montodel House-Rental-Management versions prior to 90010017b81265eb1ef3810268909f7719a33863 Description A SQL injection issue exists in the '/login.php' endpoint. Remote attackers can exploit this by manipulating the Username parameter. SQL...
CVE-2026-12775: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...
CVE-2026-10253
A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the file /managepayment.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...
CVE-2026-10252
A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /managetenant.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...
CVE-2026-10251
A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been...