A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected is an unknown function of the file ajax.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257982 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%201.pdf | Exploit |
| https://vuldb.com/?ctiid.257982 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257982 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.303671 | Third Party Advisory VDB Entry |
| https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%201.pdf | Exploit |
| https://vuldb.com/?ctiid.257982 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257982 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.303671 | Third Party Advisory VDB Entry |
Configurations
History
20 Feb 2025, 19:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:campcodes:house_rental_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%201.pdf - Exploit | |
| References | () https://vuldb.com/?ctiid.257982 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.257982 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.303671 - Third Party Advisory, VDB Entry | |
| First Time |
Campcodes
Campcodes house Rental Management System |
Information
Published : 2024-03-26 23:15
Updated : 2025-02-20 19:08
NVD link : CVE-2024-2916
Mitre link : CVE-2024-2916
CVE.ORG link : CVE-2024-2916
JSON object : View
Products Affected
campcodes
- house_rental_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')