PT-2024-33153 · Unknown · Best House Rental Management System Project In Php

Published 2024-10-25 · Updated 2024-10-28 · CVE-2024-48579

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Best House rental management system project in php version 1.0

Description The issue allows a remote attacker to execute arbitrary code via the username parameter of the "login request" API endpoint. This enables the attacker to inject malicious SQL code, potentially leading to unauthorized access or data manipulation.

Recommendations For version 1.0, consider validating and sanitizing the username parameter to prevent SQL injection attacks. As a temporary workaround, restrict access to the login functionality until a proper fix is implemented.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-48579

Affected Products

Best House Rental Management System Project In Php

References · 4

• 🔥 https://github.com/baineoli/CVE/blob/main/2024/house%20rental%20management%20system%20-%20SQL%20Injection%20%28Admin%20Login%29.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-48579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48579 · Security Note
• https://t.me/cvedetector/8954 · Telegram Post