PT-2024-28391 · Unknown · Best House Rental Management System

Krookiesec · Published 2024-07-05 · Updated 2024-10-10 · CVE-2024-39210

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Best House Rental Management System version 1.0

Description The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary file read vulnerability.

Recommendations For Best House Rental Management System version 1.0, consider restricting access to the Page parameter in "index.php" to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the functionality that allows file reading through this parameter can help mitigate the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-39210

Affected Products

Best House Rental Management System

References · 8

• 🔥 https://github.com/KRookieSec/CVE-2024-39210 · Exploit
• https://osv.dev/vulnerability/CVE-2024-39210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39210 · Security Note
• https://t.me/cvenotify/85368 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1809139656576860430 · Twitter Post
• https://twitter.com/CVEnew/status/1809260273896984714 · Twitter Post
• https://t.me/cvedetector/105 · Telegram Post
• https://twitter.com/cracbot/status/1810554571024187878 · Twitter Post