CVE-2024-39210 — Sensitive Information Exposure in Best House Rental Management System

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
7.5HIGHNVD
EPSS
7.7%
top 8.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mayurik Best House Rental Management System
Timeline
PublishedJul 5

Description

Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-927f-2f7r-vg99: Best House Rental Management System v1↗2024-07-05
▶
CVEList
CVE-2024-39210: Best House Rental Management System v1↗2024-07-05
▶
CVE-2024-39210 — Sensitive Information Exposure | cvebase