CVE-2024-10349: SourceCodester Best House Rental Management System ajax.php delete_tenant sql injection

Published Oct 24, 2024

Updated

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function deletetenant of the file /ajax.php?action=deletetenant. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Mayurik Best House Rental Management System=1.0

Event History

Oct 24, 2024

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-10349?

CVE-2024-10349 is classified as critical due to its potential for SQL injection vulnerabilities.

How do I fix CVE-2024-10349?

To fix CVE-2024-10349, validate and sanitize user inputs in the delete_tenant function of the ajax.php file.

What software is affected by CVE-2024-10349?

CVE-2024-10349 affects SourceCodester Best House Rental Management System version 1.0.

What type of vulnerability is CVE-2024-10349?

CVE-2024-10349 is an SQL injection vulnerability allowing attackers to manipulate the database.

Where is the vulnerable function in CVE-2024-10349 located?

The vulnerable function in CVE-2024-10349 is located in the ajax.php file and is called delete_tenant.