CVE-2024-3698
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 12, 2024
Updated: May 17, 2024
CWE ID 253
CWE ID 687
Summary
CVE-2024-3698 is a critical vulnerability affecting the Campcodes House Rental Management System 1.0. An unknown functionality in the file manage_payment.php is the source of the issue. Manipulation of the id argument can lead to SQL injection, making the vulnerability remotely exploitable. The exploit for this vulnerability, identified as VDB-260485, has been disclosed to the public, increasing the risk of attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share