Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-0501

A vulnerability has been found in SourceCodester House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Manage Invoice Details. The manipulation of the argument Invoice leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250609 was assigned to this vulnerability.

Published

2024-01-13T20:15:45.137

Last Modified

2024-11-21T08:46:44.113

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.4 (LOW)

CVSSv2 Vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: MULTIPLE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

6.4

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oretnom23	house_rental_management_system	1.0	Yes

References

https://drive.google.com/file/d/1xEenTDcXwNYdOxY8kdQ142nRnbcHrTRv/view?usp=sharing Exploit, Third Party Advisory ([email protected])
https://vuldb.com/?ctiid.250609 Permissions Required, Third Party Advisory ([email protected])
https://vuldb.com/?id.250609 Third Party Advisory ([email protected])
https://drive.google.com/file/d/1xEenTDcXwNYdOxY8kdQ142nRnbcHrTRv/view?usp=sharing Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.250609 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.250609 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)