github.comexploit
https://github.com/yezzzo/y3/blob/main/SourceCodester%20Best%20house%20rental%20management%20system%20project%20in%20php%201.0%20SQL%20Injection.md CVE-2024-6043
MEDIUM
SourceCodester Best House Rental Management System admin_class.php login sql injection
Record summary
CVE-2024-6043 has a selected CVSS score of 6.9 (medium); EIP currently links 1 repository PoC.
Description
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268767.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 17, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Best House Rental Management SystemBrowse SourceCodester / Best House Rental Management System | CVE List | 1.0 | affected |
Proofs of concept
1Repository PoCs
GitHublfillaz/CVE-2024-6043Repository PoCby lfillazStars: 4Not analyzed2 files
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-6043 VDB-268767 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.268767 VDB-268767 | SourceCodester Best House Rental Management System admin_class.php login sql injectionvdb entryTechnical description
https://vuldb.com/?id.268767 Submit #358176 | SourceCodester SourceCodester Best house rental management system project in php 1.0 SQL InjectionThird-party advisory
https://vuldb.com/?submit.358176