CVE-2024-12357

Katalog CVE

CVSS 5.3 · Medium EPSS 0,44%

Kerentanan External Control of File Name or Path pada mayurik best house rental management system. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

9 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-73: External Control of File Name or Path

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.287276 advisory pihak ketiga
• https://vuldb.com/?submit.457505 advisory pihak ketiga
• https://pastebin.com/Qupf8YbH permissions required
• https://vuldb.com/?ctiid.287276 permissions required
• https://www.sourcecodester.com/ product