CVE-2024-8709: SourceCodester Best House Rental Management System admin_class.php save_user sql injection

Published Sep 12, 2024

Updated

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Mayurik Best House Rental Management System=1.0

Event History

Sep 12, 2024

CVE Published

via MITRE·02:31 AM

Data Sourced

via MITRE·02:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-8709?

CVE-2024-8709 is classified as a critical vulnerability.

How do I fix CVE-2024-8709?

To fix CVE-2024-8709, update the Best House Rental Management System to a patched version.

What type of vulnerability is CVE-2024-8709?

CVE-2024-8709 is an SQL injection vulnerability affecting the delete_user/save_user function in the /admin_class.php file.

Which version of the software is affected by CVE-2024-8709?

The affected version of the software for CVE-2024-8709 is 1.0 of the Best House Rental Management System.

What could be the impact of exploiting CVE-2024-8709?

Exploiting CVE-2024-8709 could allow an attacker to execute arbitrary SQL commands on the database.