PT-2025-2069 · Unknown · Singmr Houserent

Lvzc2 · Published 2025-01-09 · Updated 2025-10-15 · CVE-2024-13213

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SingMR HouseRent version 1.0

Description A vulnerability was found in SingMR HouseRent, affecting unknown code of the file "/toAdminUpdateHousePage?hID=30". The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For SingMR HouseRent version 1.0, consider disabling access to the "/toAdminUpdateHousePage?hID=30" endpoint until a patch is available. Restrict input to prevent cross site scripting attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2024-13213

Affected Products

Singmr Houserent

References · 10

• 🔥 https://github.com/SingMR/HouseRent/issues/15#issue-2762127702 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13213 · Security Note
• https://github.com/SingMR/HouseRent/issues/15 · Note
• https://t.me/cvedetector/14773 · Telegram Post
• https://twitter.com/CVEnew/status/1877256325371179173 · Twitter Post
• https://vuldb.com/?id.290818 · Note
• https://vuldb.com/?ctiid.290818 · Note
• https://t.me/cveNotify/138873 · Telegram Post
• https://t.me/cvenotify/106871 · Telegram Post
• https://vuldb.com/?submit.471444 · Note