CVE-2023-3806

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester House Rental and Property Listing System 1.0. Affected is an unknown function of the file btn_functions.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235074 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
SourceCodester	House Rental and Property Listing System	1.0

References

https://github.com/GZRsecurity/Cve-System/blob/main/House%20Rental%20and%20Property%20Listing%20System%20register.php%20has%20%20File%20Upload(RCE)%20Vulnerability.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.235074Permissions Required, Third Party Advisory
https://vuldb.com/?id.235074Third Party Advisory
https://github.com/GZRsecurity/Cve-System/blob/main/House%20Rental%20and%20Property%20Listing%20System%20register.php%20has%20%20File%20Upload(RCE)%20Vulnerability.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.235074Permissions Required, Third Party Advisory
https://vuldb.com/?id.235074Third Party Advisory

Timeline

Published: Jul 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-380608.8Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS CVE-2023-380615.4In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible CVE-2023-380626.5In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations CVE-2023-380635.4In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible CVE-2023-380646.5In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log CVE-2023-380655.4In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible CVE-2023-380666.1In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads CVE-2023-380676.5In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log CVE-2023-380687.3In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms CVE-2023-380693.3In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases CVE-2023-38078.8A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this vulnerability is CVE-2023-380707.8A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcen