Vulnerabilidades do SourceCodester Best House Rental Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SourceCodester Best House Rental Management System: 6 registro(s), com versões afetadas e correções.
CVE-2025-12853
Crítica · 9.8
CWE-89 07/11/2025
SourceCodester Best House Rental Management System admin_class.php delete_house sql injection
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CVE-2025-12614
Crítica · 9.8
CWE-89 03/11/2025
SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-12598
Crítica · 9.8
CWE-89 02/11/2025
SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Other parameters might be affected as well.
CVE-2025-12597
Crítica · 9.8
CWE-89 02/11/2025
SourceCodester Best House Rental Management System admin_class.php save_category sql injection
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the file /admin_class.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2025-12226
Crítica · 9.8
CWE-89 27/10/2025
SourceCodester Best House Rental Management System admin_class.php save_house sql injection
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVE-2025-12208
Crítica · 9.8
CWE-89 27/10/2025
SourceCodester Best House Rental Management System admin_class.php login2 sql injection
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.