CVE-2024-12943: CodeAstro House Rental Management System ownersignup.php sql injection
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "m" to be affected. But it must be assumed that many other parameters are affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12943?
CVE-2024-12943 has been declared as a critical vulnerability.
What functionality is affected by CVE-2024-12943?
CVE-2024-12943 affects an unknown functionality in the file /ownersignup.php.
What type of vulnerability is CVE-2024-12943?
CVE-2024-12943 is a SQL injection vulnerability that can be exploited through parameter manipulation.
How can I mitigate CVE-2024-12943?
To mitigate CVE-2024-12943, ensure input validation and parameterized queries to prevent SQL injection attacks.
Which software is impacted by CVE-2024-12943?
CVE-2024-12943 impacts the CodeAstro House Rental Management System version 1.0.