CVE-2022-27352

Name of the Vulnerable Software and Affected Versions Simple House Rental System version v1

Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is possible through the "/app/register.php" API endpoint.

Recommendations For Simple House Rental System version v1, consider disabling the file upload functionality in the /app/register.php endpoint until a patch is available to prevent exploitation. Restrict access to this endpoint to minimize the risk of arbitrary code execution.