CVE-2022-27352

The CVE-2022-27352 issue affects Simple House Rental System v1, where /app/register.php allows arbitrary file upload due to missing validation. The vulnerability enables remote code execution by uploading a crafted PHP file and then accessing it (e.g., /app/uploads/shell.php), as demonstrated by ...

CVE-2024-0343

The CVE-2024-0343 entry targets CodeAstro Simple House Rental System 5.6, specifically the Login Panel. A cross-site scripting (XSS) vulnerability exists in an unknown login functionality, enabling remote exploitation. Public exploits have been disclosed. Several connected sources corroborate the...