A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
References
Link | Resource |
---|---|
https://github.com/nikeshtiwari1/House-Rental-System/issues/8 | Exploit Issue Tracking Third Party Advisory |
https://vuldb.com/?id.214772 | Permissions Required Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: VulDB
Published: 2022-12-03T00:00:00
Updated: 2022-12-03T00:00:00
Reserved: 2022-12-03T00:00:00
Link: CVE-2022-4276
JSON object: View
NVD Information
Status : Modified
Published: 2022-12-03T16:15:10.143
Modified: 2023-11-07T03:57:23.313
Link: CVE-2022-4276
JSON object: View
Redhat Information
No data.