4 matches found
CVE-2022-4276
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...
Out-of-bounds
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...
CVE-2022-4276 House Rental System POST Request tenant-engine.php unrestricted upload
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...
CVE-2022-4276
Affected product/component: House Rental System, specifically the POST Request Handler’s tenant-engine.php. Vulnerability: manipulation of the id_photo parameter leads to unrestricted file upload, enabling remote exploitation. Root cause: unknown functionality in the file that allows unrestricted...