CVE-2024-5363

CWE-89 — SQL Injection4 documents3 sources

Severity

5.3MEDIUM

EPSS

0.1%

top 81.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Best House Rental Management System Mayurik Best House Rental Management System

Timeline

PublishedMay 26

Description

A vulnerability classified as critical was found in SourceCodester Best House Rental Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266275.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5sourcecodester/best_house_rental_management_system1.0

▶NVDmayurik/best_house_rental_management_system1.0

🔴Vulnerability Details

CVEList

SourceCodester Best House Rental Management System manage_user.php sql injection↗2024-05-26

▶

📋Vendor Advisories

Oracle

Oracle Oracle Communications Risk Matrix: Observability Services Overlay (nginx) — CVE-2023-5363↗2024-04-15

▶

Oracle

Oracle Oracle MySQL Risk Matrix: Connector/C++ (OpenSSL) — CVE-2023-5363↗2024-01-15

▶