A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability.
References
Link | Resource |
---|---|
https://vuldb.com/?id.214770 | Permissions Required Third Party Advisory VDB Entry |
https://github.com/nikeshtiwari1/House-Rental-System/issues/6 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-12-03 08:15
Updated : 2022-12-05 17:09
NVD link : CVE-2022-4274
Mitre link : CVE-2022-4274
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
house_rental_system_project
- house_rental_system