Lucene search
+L

20153 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12357: External Control of File Name or Path

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

6.9CVSS4.9AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2024-12355: Improper Input Validation

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

7.8CVSS5AI score0.0031EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2024-12353: Improper Input Validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

7.8CVSS5.5AI score0.00303EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•21 views

SourceCodester Best House Rental Management System has security vulnerabilities

SourceCodester Best House Rental Management System is a SourceCodester open source house rental management system. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from a file inclusion issue in the page parameter of the /index.ph...

6.9CVSS5.3AI score0.00436EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•19 views

SourceCodester Phone Contact Manager System security vulnerabilities

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Phone Contact Manager System, which stems from an incorrect input validation issue contained in the...

7.8CVSS5.8AI score0.0031EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•20 views

SourceCodester Phone Contact Manager System security vulnerabilities

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which originates from an incorrect input validation issue in the name parameter of the...

7.8CVSS5.9AI score0.00303EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•26 views

SourceCodester Phone Contact Manager System security vulnerabilities

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which is caused by a buffer overflow issue in the UserInterface::MenuDisplayStart function...

7.8CVSS6.5AI score0.0036EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•13 views

CVE-2024-12354: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. T...

7.8CVSS6.2AI score0.0036EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/27 5:15 p.m.•33 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00863EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/11/27 4:31 p.m.•24 views

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS6.2AI score0.00863EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/11/27 4:31 p.m.•51 views

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00863EPSS
SaveExploits1References6
CVE
CVE
•added 2024/11/27 4:31 p.m.•91 views

CVE-2024-11860

CVE-2024-11860 affects SourceCodester Best House Rental Management System 1.0. The vulnerability exists in the POST Request Handler, specifically the file path /rental/ajax.php?action=delete_tenant, where manipulation of the argument id leads to improper authorization. This can be exploited remot...

6.9CVSS6.2AI score0.00863EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•9 views

CVE-2024-11860: Improper Authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS6.2AI score0.00863EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/27 12:00 a.m.•17 views

SourceCodester Best House Rental Management System has security vulnerabilities

SourceCodester Best House Rental Management System is a SourceCodester open source house rental management system. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which stems from an improper authorization contained in the id parameter of the POS...

6.9CVSS6.5AI score0.00863EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/27 12:00 a.m.•18 views

PT-2024-17300

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /rental/ajax.php?action=delete tenant of the component POST Request Handler...

6.9CVSS6.1AI score0.00863EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2024/11/26 8:15 p.m.•19 views

CVE-2024-11743

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

4.3CVSS4.7AI score0.0034EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/26 8:15 p.m.•35 views

CVE-2024-11743

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

6.9CVSS0.0034EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/26 8:15 p.m.•28 views

CVE-2024-11742

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.4CVSS0.0053EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/26 8:00 p.m.•20 views

CVE-2024-11743 SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

6.9CVSS4.7AI score0.0034EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/26 8:00 p.m.•74 views

CVE-2024-11743

CVE-2024-11743 affects SourceCodester Best House Rental Management System 1.0. The vulnerability lies in the POST Request Handler function for the endpoint /rental/ajax.php?action=delete_user, enabling cross-site request forgery. Exploitation is described remotely, with user interaction often req...

6.9CVSS4.7AI score0.0034EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder