CVE-2024-0502: SourceCodester House Rental Management System Edit User manage_user.php sql injection
A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file manageuser.php of the component Edit User. The manipulation of the argument id/name/username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250610 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0502?
CVE-2024-0502 is classified as a critical vulnerability.
How do I fix CVE-2024-0502?
To fix CVE-2024-0502, ensure to sanitize and validate the input parameters in the manage_user.php file.
What components are affected by CVE-2024-0502?
CVE-2024-0502 affects the Edit User functionality in the SourceCodester House Rental Management System version 1.0.
What kind of attack is possible with CVE-2024-0502?
CVE-2024-0502 allows for SQL injection attacks through improper handling of user inputs.
Is CVE-2024-0502 being actively exploited?
There is currently no indication that CVE-2024-0502 is actively being exploited, but it is considered critical and should be addressed immediately.