Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/11/02 12:02 p.m.•30 views

CVE-2025-12598 SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection

A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function savetenant of the file /adminclass.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been...

5.8CVSS0.00408EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/02 12:00 a.m.•2 views

CVE-2025-12598: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function savetenant of the file /adminclass.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.5AI score0.00408EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•4 views

CVE-2024-11742: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.4CVSS3.6AI score0.0053EPSS
SaveExploits1References1
Rows per page
Query Builder