github.com
https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46377.md CVE-2024-46377
CRITICAL
Record summary
CVE-2024-46377 has a selected CVSS score of 9.8 (critical); EIP currently links 1 repository PoC.
Description
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 19, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
best_house_rental_management_systemBrowse sourcecodester / best_house_rental_management_systemDefault status: unknown | CVE List | 1.0 | affected |
Proofs of concept
1Repository PoCs
GitHubvidura2/CVE-2024-46377Repository PoCby vidura2Stars: 2Not analyzed3 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-46377