CVE-2024-3697: Campcodes House Rental Management System manage_tenant.php sql injection

Published Apr 12, 2024

Updated

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected is an unknown function of the file managetenant.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260484.

Affected Software

2 affected components

Campcodes House Rental Management System

Campcodes House Rental Management System=1.0

Event History

Apr 12, 2024

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-3697?

CVE-2024-3697 has been classified as a critical vulnerability.

What type of vulnerability is CVE-2024-3697?

CVE-2024-3697 is classified as a SQL injection vulnerability.

How does CVE-2024-3697 affect the Campcodes House Rental Management System?

CVE-2024-3697 affects an unknown function in the manage_tenant.php file, where manipulation of the 'id' argument can lead to SQL injection.

Can CVE-2024-3697 be exploited remotely?

Yes, CVE-2024-3697 can be exploited remotely.

How do I fix CVE-2024-3697?

To resolve CVE-2024-3697, ensure proper sanitization and validation of user input in the manage_tenant.php file, particularly the 'id' argument.