CVE-2024-40475 - SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php

Back Back to CVE browser

HIGH

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php

Published Aug 8, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.53%

Description

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.

Affected products

Vendor SourceCodester Product Best House Rental Management System Default
unknown
Affected
- 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SourceCodester	Best House Rental Management System	unknown	Affected 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38466		Advisory
https://github.com/takekaramey/CVE_Writeup/blob/main/Sourcecodester/Best%20House%20Rental%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Deep%20URL.pdf		Third Party Advisory
https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 8, 2024

Updated Aug 9, 2024

Reserved Jul 5, 2024

Link CVE-2024-40475

CISA Vulnrichment

Updated Aug 9, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-40475

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 8, 2024

Updated Aug 9, 2024

Link EUVD-2024-38466

GitHub

No data