CVE-2024-3696: Campcodes House Rental Management System view_payment.php sql injection

Published Apr 12, 2024

Updated

A vulnerability was found in Campcodes House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file viewpayment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260483.

Affected Software

2 affected components

Campcodes House Rental Management System

Campcodes House Rental Management System=1.0

Event History

Apr 12, 2024

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-3696?

CVE-2024-3696 is classified as a critical vulnerability.

How do I fix CVE-2024-3696?

To fix CVE-2024-3696, ensure that the application is updated to the latest patch provided by Campcodes.

What type of vulnerability is CVE-2024-3696?

CVE-2024-3696 is an SQL injection vulnerability affecting the view_payment.php file.

In which system can CVE-2024-3696 be found?

CVE-2024-3696 is found in Campcodes House Rental Management System version 1.0.

Can CVE-2024-3696 be exploited remotely?

Yes, CVE-2024-3696 can be exploited remotely by manipulating the argument id in the vulnerable file.