Vulnerabilities (CVE)

Filtered by vendor Mayurik Subscribe
Total 263 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-40476 1 Mayurik 1 Best House Rental Management 2024-08-15 N/A 8.0 HIGH
A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the /rental/ajax.php?action=delete_tenant.
CVE-2024-40475 1 Mayurik 1 Best House Rental Management System 2024-08-15 N/A 8.8 HIGH
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.
CVE-2024-40474 1 Mayurik 1 Best House Rental Management System 2024-08-15 N/A 5.4 MEDIUM
A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0.