3 matches found
CVE-2022-4275
CVE-2022-4275 affects House Rental System. The vulnerability is in the POST Request Handler, specifically the unknown functionality in the file search-property.php where manipulation of the search_property argument leads to a SQL injection. It can be exploited remotely, and public disclosures exi...
CVE-2022-4276
Affected product/component: House Rental System, specifically the POST Request Handler’s tenant-engine.php. Vulnerability: manipulation of the id_photo parameter leads to unrestricted file upload, enabling remote exploitation. Root cause: unknown functionality in the file that allows unrestricted...
CVE-2022-4274
CVE-2022-4274 affects the House Rental System. A vulnerability in an unknown function of /view-property.php allows remote SQL injection by manipulating the property_id parameter. The issue is publicly disclosed and exploited according to multiple sources (NVD, CVE list, Red Hat notes). Root cause...