CVE-2024-6042: itsourcecode Real Estate Management System, инжекция

Описание

Оригинално описание

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-268766 is the identifier assigned to this vulnerability.

Засегнати продукти

• itsourcecode Real Estate Management System: 1.0
• real_estate_management_software real_estate_management_software: 1.0

Вид слабост

• CWE-89 SQL инжекция

История

Други уязвимости в itsourcecode Real Estate Management System

• 7.3CVE-2026-78244

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-6042
• https://nvd.nist.gov/vuln/detail/CVE-2024-6042
• https://vuldb.com/?id.268766
• https://vuldb.com/?ctiid.268766
• https://vuldb.com/?submit.357851
• https://github.com/Cormac315/cve/issues/1