CVE-2024-6066: SourceCodester Best House Rental Management System payment_report.php sql injection
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file paymentreport.php. The manipulation of the argument monthof leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268794 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6066?
CVE-2024-6066 is classified as critical due to its potential for remote SQL injection.
What vulnerable component is affected by CVE-2024-6066?
CVE-2024-6066 affects the payment_report.php file in the Best House Rental Management System version 1.0.
How can I fix CVE-2024-6066?
To fix CVE-2024-6066, consider implementing input validation and using prepared statements to prevent SQL injection.
What type of attack can be executed using CVE-2024-6066?
CVE-2024-6066 allows attackers to perform SQL injection attacks through manipulation of the month_of argument.
What software version is affected by CVE-2024-6066?
CVE-2024-6066 specifically affects version 1.0 of the Best House Rental Management System.