Undertaker Hacker

**Name of the Vulnerable Software and Affected Versions** Online Rent (aka Online Rental Property Script) versions 4.5 and earlier Online Rent (aka Online Rental Property Script) versions 5.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `pid` parameter in the "index.php" file. **Recommendations** For versions 4.5 and earlier, update to a version later than 5.0. For versions 5.0 and earlier, update to a version later than 5.0. As a temporary workaround, consider restricting access to the `pid` parameter in the "index.php" file until a patch is available.