CVE-2024-3698: Campcodes House Rental Management System manage_payment.php sql injection

Published Apr 12, 2024

Updated

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file managepayment.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260485 was assigned to this vulnerability.

Affected Software

2 affected components

Campcodes House Rental Management System

Campcodes House Rental Management System=1.0

Event History

Apr 12, 2024

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-3698?

CVE-2024-3698 has been declared as critical.

What does CVE-2024-3698 exploit?

CVE-2024-3698 exploits a vulnerability in the manage_payment.php file, specifically through SQL injection.

How can I fix CVE-2024-3698?

To fix CVE-2024-3698, ensure proper input validation and use parameterized queries to prevent SQL injection.

Which software is affected by CVE-2024-3698?

CVE-2024-3698 affects Campcodes House Rental Management System version 1.0.

What type of vulnerability is CVE-2024-3698?

CVE-2024-3698 is categorized as an SQL injection vulnerability.