PT-2024-28861 · Sourcecodester · Sourcecodester Best House Rental Management System

Published 2024-08-08 · Updated 2024-08-15 · CVE-2024-40474

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester House Rental Management System version 1.0

Description A Reflected Cross Site Scripting (XSS) vulnerability was found in the "edit-cate.php" file. This issue allows for the execution of malicious scripts, potentially leading to unauthorized access or data theft.

Recommendations For SourceCodester House Rental Management System version 1.0, consider disabling access to the "edit-cate.php" file until a patch is available. Restricting user input in this file can also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-40474

Affected Products

Sourcecodester Best House Rental Management System

References · 9

• 🔥 https://github.com/takekaramey/CVE_Writeup/blob/main/Sourcecodester/Best%20House%20Rental%20Management%20System%20v1.0/Reflected%20XSS.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2024-40474 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40474 · Security Note
• https://twitter.com/cracbot/status/1823238169648844941 · Twitter Post
• https://twitter.com/cracbot/status/1823600511372886107 · Twitter Post
• https://t.me/cvenotify/90206 · Telegram Post
• https://twitter.com/cracbot/status/1823962905664217258 · Twitter Post
• https://t.me/cvenotify/90733 · Telegram Post
• https://sourcecodester.com/php/17375/best-courier-management-system-project-php.html · Note