PT-2024-22777
CVE-2024-2917
·
Published
2024-03-26
·
Updated
2025-02-20
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Campcodes House Rental Management System version 1.0
Description
A critical issue was found in the system, affecting an unknown functionality of the file index.php. The manipulation of the
page argument leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Recommendations
For Campcodes House Rental Management System version 1.0, consider disabling the
page argument in the index.php file until a patch is available. Restrict access to the index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. Found an issue in the description? Have something to add? Feel free to write us 👾