Medium · 4.7 CVE-2024-40576 EUVD-2024-38527

Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "H…

Published Jul 29, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component.

References

https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html
https://github.com/jubilianite/CVEs/blob/main/CVE-2024-40576.md
https://github.com/jubilianite/CVEs/security/advisories/GHSA-674x-j9wj-qvpp