Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:house_rental_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductHouse Rental Management System (f1ba8aa1-26b7-5093-bf8c-c638bc2e1a8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2076 vulnerable 2026-06-03 14:55:28.336596 CodeAstro House Rental Management System tenant.php missing authentication
MEDIUM (5.3)
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255392.
Published: 2024-03-01T18:31:07.093Z
Updated: 2025-04-16T20:47:03.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1825 vulnerable 2026-06-03 14:54:34.739843 CodeAstro House Rental Management System User Registration Page cross site scripting
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input <img src="1" onerror="console.log(1)"> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254613 was assigned to this vulnerability.
Published: 2024-02-23T16:31:08.110Z
Updated: 2024-08-01T18:56:20.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1824 vulnerable 2026-06-03 14:54:34.738680 CodeAstro House Rental Management System signing.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file signing.php. The manipulation of the argument uname/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254612.
Published: 2024-02-23T16:00:12.858Z
Updated: 2024-08-14T19:04:28.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12944 vulnerable 2026-06-03 14:54:23.456789 CodeAstro House Rental Management System signin.php sql injection
HIGH (7.3)
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T09:00:17.867Z
Updated: 2024-12-27T14:40:36.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12943 vulnerable 2026-06-03 14:54:23.456222 CodeAstro House Rental Management System ownersignup.php sql injection
HIGH (7.3)
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "m" to be affected. But it must be assumed that many other parameters are affected as well.
Published: 2024-12-26T08:31:05.663Z
Updated: 2024-12-27T14:41:41.997Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.