Lucene search
HistoryAug 12, 2024 - 1:38 p.m.
CVE-2024-40473
stored xss
sourcecodester
house rental management system
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.6%
A Stored Cross Site Scripting (XSS) vulnerability was found in “manage_houses.php” in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via “House_no” and “Description” parameter fields.
Affected configurations
Node
mayurikbest_house_rental_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mayurik | best_house_rental_management_system | 1.0 | cpe:2.3:a:mayurik:best_house_rental_management_system:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-40473
2024-08-12 13:38:28
cvelist
cvelist
CVE-2024-40473
2024-08-08 00:00:00
vulnrichment
vulnrichment
CVE-2024-40473
2024-08-08 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.6%
Related for NVD:CVE-2024-40473