CVE-2024-5981

A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268458 is the identifier assigned to this vulnerability.
References
Link Resource
https://github.com/LiuYongXiang-git/cve/issues/1 Exploit Third Party Advisory
https://vuldb.com/?ctiid.268458 Permissions Required VDB Entry
https://vuldb.com/?id.268458 VDB Entry
https://vuldb.com/?submit.356163 Third Party Advisory VDB Entry
https://github.com/LiuYongXiang-git/cve/issues/1 Exploit Third Party Advisory
https://vuldb.com/?ctiid.268458 Permissions Required VDB Entry
https://vuldb.com/?id.268458 VDB Entry
https://vuldb.com/?submit.356163 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:angeljudesuarez:online_house_rental_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 09:48

Type Values Removed Values Added
CVSS v2 : 6.5
v3 : 9.8
v2 : 6.5
v3 : 6.3
References () https://github.com/LiuYongXiang-git/cve/issues/1 - Exploit, Third Party Advisory () https://github.com/LiuYongXiang-git/cve/issues/1 - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.268458 - Permissions Required, VDB Entry () https://vuldb.com/?ctiid.268458 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.268458 - VDB Entry () https://vuldb.com/?id.268458 - VDB Entry
References () https://vuldb.com/?submit.356163 - Third Party Advisory, VDB Entry () https://vuldb.com/?submit.356163 - Third Party Advisory, VDB Entry

16 Aug 2024, 20:29

Type Values Removed Values Added
CPE cpe:2.3:a:angeljudesuarez:online_house_rental_system:1.0:*:*:*:*:*:*:*
First Time Angeljudesuarez online House Rental System
Angeljudesuarez
CVSS v2 : 6.5
v3 : 6.3
v2 : 6.5
v3 : 9.8
References () https://github.com/LiuYongXiang-git/cve/issues/1 - () https://github.com/LiuYongXiang-git/cve/issues/1 - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.268458 - () https://vuldb.com/?ctiid.268458 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.268458 - () https://vuldb.com/?id.268458 - VDB Entry
References () https://vuldb.com/?submit.356163 - () https://vuldb.com/?submit.356163 - Third Party Advisory, VDB Entry

14 Jun 2024, 18:15

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en itsourcecode Online House Rental System 1.0. Ha sido clasificada como crítica. Una función desconocida del archivo enable_user.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-268458 es el identificador asignado a esta vulnerabilidad.

14 Jun 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-14 02:15

Updated : 2024-11-21 09:48


NVD link : CVE-2024-5981

Mitre link : CVE-2024-5981

CVE.ORG link : CVE-2024-5981


JSON object : View

Products Affected

angeljudesuarez

  • online_house_rental_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')