Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:best_house_rental_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductBest House Rental Management System (a7232dff-c16a-50a6-916e-3b494dfccdcd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9041 vulnerable 2026-06-08 07:00:26.541674 SourceCodester Best House Rental Management System ajax.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=update_account. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-20T16:31:05.614Z
Updated: 2024-09-20T17:26:11.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9039 vulnerable 2026-06-08 07:00:26.539964 SourceCodester Best House Rental Management System ajax.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-20T16:00:08.470Z
Updated: 2024-09-20T16:18:21.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9033 vulnerable 2026-06-08 07:00:26.516087 SourceCodester Best House Rental Management System ajax.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_category. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-20T14:31:05.544Z
Updated: 2024-09-20T15:49:40.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8709 vulnerable 2026-06-08 07:00:25.439377 SourceCodester Best House Rental Management System admin_class.php save_user sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function delete_user/save_user of the file /admin_class.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-12T02:31:04.772Z
Updated: 2024-09-12T13:16:24.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7812 vulnerable 2026-06-08 06:58:23.473165 SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental_0/rental/ajax.php?action=save_tenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-15T03:00:06.502Z
Updated: 2024-08-20T15:06:09.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6066 vulnerable 2026-06-08 06:58:17.617057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5363 vulnerable 2026-06-08 06:56:15.726183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46377 vulnerable 2026-06-08 06:48:10.047346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40576 vulnerable 2026-06-08 06:43:52.394920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40476 vulnerable 2026-06-08 06:43:52.267257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40475 vulnerable 2026-06-08 06:43:52.266577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40473 vulnerable 2026-06-08 06:43:52.263296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12357 vulnerable 2026-06-08 06:23:51.774133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11860 vulnerable 2026-06-08 06:23:50.569612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11743 vulnerable 2026-06-08 06:23:50.329446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11742 vulnerable 2026-06-08 06:23:50.314711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10349 vulnerable 2026-06-08 06:22:04.039290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10348 vulnerable 2026-06-08 06:22:04.037252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.