CVE-2024-9041: SourceCodester Best House Rental Management System ajax.php sql injection

Published Sep 20, 2024

Updated

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=updateaccount. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Mayurik Best House Rental Management System=1.0

Event History

Sep 20, 2024

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-9041?

CVE-2024-9041 is classified as critical due to its potential for SQL injection.

How does CVE-2024-9041 affect the Best House Rental Management System?

CVE-2024-9041 affects the update_account function in the /ajax.php file, allowing manipulation of user input.

What are the potential impacts of CVE-2024-9041?

Exploitation of CVE-2024-9041 could lead to unauthorized access and manipulation of the database.

How can I fix CVE-2024-9041?

To fix CVE-2024-9041, validate and sanitize user inputs in the affected file to prevent SQL injection.

Which versions of the Best House Rental Management System are affected by CVE-2024-9041?

CVE-2024-9041 impacts version 1.0 of the Best House Rental Management System.