CWE
89
Advisory Published
Updated

CVE-2024-1824: CodeAstro House Rental Management System signing.php sql injection

First published: Fri Feb 23 2024(Updated: )

A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file signing.php. The manipulation of the argument uname/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254612.

Credit: cna@vuldb.com

Affected SoftwareAffected VersionHow to fix
CodeAstro House Rental Management System=1.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2024-1824?

    CVE-2024-1824 is classified as a critical vulnerability.

  • How does CVE-2024-1824 affect the CodeAstro House Rental Management System?

    CVE-2024-1824 affects the file signing.php functionality, leading to SQL injection vulnerabilities.

  • What can an attacker do with CVE-2024-1824?

    An attacker can exploit CVE-2024-1824 to manipulate the uname/password parameters, potentially executing unauthorized SQL commands.

  • Is there a workaround for CVE-2024-1824?

    Currently, the only way to mitigate CVE-2024-1824 is to ensure proper input validation and sanitization.

  • How can I determine if my system is vulnerable to CVE-2024-1824?

    You can determine vulnerability by checking if you are running CodeAstro House Rental Management System version 1.0 and looking at the usage of the affected file.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203