CVE-2024-5364

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System up to 1.0. Affected by this issue is some unknown functionality of the file manage_tenant.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266276.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: May 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-536478.2Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email ve CVE-2024-536486.8A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 CVE-2024-536496.5A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9 CVE-2024-53656.5A vulnerability, which was classified as critical, was found in SourceCodester Best House Rental Management System up to 1.0. This affects a CVE-2024-536514.6A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (C CVE-2024-53666.5A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critical. This vulnerabilit CVE-2024-53676.1A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processi CVE-2024-536726.3A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands o CVE-2024-536739.8A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.CVE-2024-536747.5An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain CVE-2024-536757.5An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain CVE-2024-536769.8A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.