A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
References
Link | Resource |
---|---|
https://vuldb.com/?id.214772 | Permissions Required Third Party Advisory VDB Entry |
https://github.com/nikeshtiwari1/House-Rental-System/issues/8 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-12-03 08:15
Updated : 2022-12-05 17:08
NVD link : CVE-2022-4276
Mitre link : CVE-2022-4276
JSON object : View
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type
Products Affected
house_rental_system_project
- house_rental_system