Approved changes feed: RSS · Atom

cpe:2.3:a:singmr:houserent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSingmr (586311a6-05cd-52af-8a6a-14840e6ac4b9)
ProductHouserent (efa8877c-7ab2-5ec9-9f5a-859be4f8f724)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/singmr/houserent purl2cpe 2026-06-01 10:17:18.529108

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13213 vulnerable 2026-06-08 06:25:36.976895 SingMR HouseRent toAdminUpdateHousePage cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T04:00:15.391Z
Updated: 2025-01-09T15:38:07.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13212 vulnerable 2026-06-08 06:25:36.976208 SingMR HouseRent AddHouseController.java upload unrestricted upload
MEDIUM (6.3)
A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T04:00:12.875Z
Updated: 2025-01-09T15:38:43.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13211 vulnerable 2026-06-08 06:25:36.974374 SingMR HouseRent AdminController.java access control
MEDIUM (6.3)
A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T03:31:06.175Z
Updated: 2025-01-09T15:46:38.557Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.