CVE-2024-12944

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
CodeAstroHouse Rental Management System1.0

References

Timeline

Published
Dec 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-129459.8A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of tCVE-2024-129469.8A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affCVE-2024-129479.8A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown funcCVE-2024-129488.8A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part ofCVE-2024-129498.8A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknowCVE-2024-12956.5The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at CVE-2024-129508.8A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects somCVE-2024-129519.8A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function CVE-2024-129526.3A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_commanCVE-2024-129539.8A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issCVE-2024-129549.8A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown pCVE-2024-129554.3A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affe
CVE-2024-12944: Critical severity, CVSS 9.8 | Vulnix