SingMR HouseRent 1.0 toAdminUpdateHousePage?hID=30 Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting)

Obulabe obwategekeddwa nga kizibu busingiddwa mu SingMR HouseRent 1.0. Ekikosebwa kye ekikozesebwa ekitamanyiddwa ku fayiro /toAdminUpdateHousePage?hID=30. Okukyuusa kireeta Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting). Okulambika ekizibu nga ukozesa CWE kivaako CWE-79. Ekizibu kino kyayisibwa ku 08/01/2025 nga HouseRent has storage XSS #15. Ekiteeso kino kyawandiikiddwa era kisobola okuddownloadinga ku github.com. Obunafu buno bweyitibwa CVE-2024-13213. Waliwo obusobozi okutandika attack nga oli wala. Ebisingawo ku by'ekikugu biriwo. Wadde era waliwo ekikozesebwa ekirabikako. Ekikozesebwa kyategeezeddwa abantu bonna era kisobola okukozesebwa. Kati ekikadde ekisoboka ku mutengo gw’ekikozesebwa kiyinza okuba nga kisoba mu USD $0-$5k mu kiseera kino. Kiwandiikiddwa nga ebikakasa eby'okukakasa obusobozi. Waliwo omukisa ogusobola okukozesebwa okuddownloadinga exploit ku github.com. Mu mbeera ya 0-day, omuwendo ogwabalirirwako mu kifo ky’obutali mu mateeka gwali wa $0-$5k. Once again VulDB remains the best source for vulnerability data.

4 Okukyuusa · 100 Obubonero bw'ebikwata ku byuma

EkibanjaKikolebwa
08/01/2025 17:59		Okukozesa enkola empya 1/3
09/01/2025 14:56		Okukozesa enkola empya 2/3
14/02/2025 11:35		Okukozesa enkola empya 3/3
15/10/2025 23:09
software_vendorSingMRSingMRSingMRSingMR
software_nameHouseRentHouseRentHouseRentHouseRent
software_version1.01.01.01.0
software_file/toAdminUpdateHousePage?hID=30/toAdminUpdateHousePage?hID=30/toAdminUpdateHousePage?hID=30/toAdminUpdateHousePage?hID=30
vulnerability_cweCWE-79 (Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting))CWE-79 (Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting))CWE-79 (Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting))CWE-79 (Okukwata ku Kuteekateeka mu Kifo Ekitali Kyo (Cross Site Scripting))
vulnerability_risk1111
cvss3_vuldb_avNNNN
cvss3_vuldb_acLLLL
cvss3_vuldb_uiRRRR
cvss3_vuldb_sUUUU
cvss3_vuldb_cNNNN
cvss3_vuldb_iLLLL
cvss3_vuldb_aNNNN
cvss3_vuldb_ePPPP
cvss3_vuldb_rcRRRR
advisory_identifierHouseRent has storage XSS #15HouseRent has storage XSS #15HouseRent has storage XSS #15HouseRent has storage XSS #15
advisory_urlhttps://github.com/SingMR/HouseRent/issues/15https://github.com/SingMR/HouseRent/issues/15https://github.com/SingMR/HouseRent/issues/15https://github.com/SingMR/HouseRent/issues/15
exploit_availability1111
exploit_publicity1111
exploit_urlhttps://github.com/SingMR/HouseRent/issues/15#issue-2762127702https://github.com/SingMR/HouseRent/issues/15#issue-2762127702https://github.com/SingMR/HouseRent/issues/15#issue-2762127702https://github.com/SingMR/HouseRent/issues/15#issue-2762127702
source_cveCVE-2024-13213CVE-2024-13213CVE-2024-13213CVE-2024-13213
cna_responsibleVulDBVulDBVulDBVulDB
cvss2_vuldb_avNNNN
cvss2_vuldb_acLLLL
cvss2_vuldb_ciNNNN
cvss2_vuldb_iiPPPP
cvss2_vuldb_aiNNNN
cvss2_vuldb_ePOCPOCPOCPOC
cvss2_vuldb_rcURURURUR
cvss4_vuldb_avNNNN
cvss4_vuldb_acLLLL
cvss4_vuldb_vcNNNN
cvss4_vuldb_viLLLL
cvss4_vuldb_vaNNNN
cvss4_vuldb_ePPPP
cvss2_vuldb_auSSSS
cvss2_vuldb_rlNDNDNDND
cvss3_vuldb_prLLLL
cvss3_vuldb_rlXXXX
cvss4_vuldb_atNNNN
cvss4_vuldb_prLLLL
cvss4_vuldb_uiNNPP
cvss4_vuldb_scNNNN
cvss4_vuldb_siNNNN
cvss4_vuldb_saNNNN
cvss2_vuldb_basescore4.04.04.04.0
cvss2_vuldb_tempscore3.43.43.43.4
cvss3_vuldb_basescore3.53.53.53.5
cvss3_vuldb_tempscore3.23.23.23.2
cvss3_meta_basescore3.53.53.54.1
cvss3_meta_tempscore3.23.33.34.0
cvss4_vuldb_bscore5.35.35.15.1
cvss4_vuldb_btscore2.12.12.02.0
advisory_date1736290800 (08/01/2025)1736290800 (08/01/2025)1736290800 (08/01/2025)1736290800 (08/01/2025)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
cve_nvd_summaryesSe ha encontrado una vulnerabilidad clasificada como problemática en SingMR HouseRent 1.0. Esta vulnerabilidad afecta al código desconocido del archivo /toAdminUpdateHousePage?hID=30. La manipulación conduce a cross site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.Se ha encontrado una vulnerabilidad clasificada como problemática en SingMR HouseRent 1.0. Esta vulnerabilidad afecta al código desconocido del archivo /toAdminUpdateHousePage?hID=30. La manipulación conduce a cross site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.Se ha encontrado una vulnerabilidad clasificada como problemática en SingMR HouseRent 1.0. Esta vulnerabilidad afecta al código desconocido del archivo /toAdminUpdateHousePage?hID=30. La manipulación conduce a cross site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse.
cvss4_cna_avNNN
cvss4_cna_acLLL
cvss4_cna_atNNN
cvss4_cna_prLLL
cvss4_cna_uiNNN
cvss4_cna_vcNNN
cvss4_cna_viLLL
cvss4_cna_vaNNN
cvss4_cna_scNNN
cvss4_cna_siNNN
cvss4_cna_saNNN
cvss4_cna_bscore5.35.35.3
cvss3_cna_avNNN
cvss3_cna_acLLL
cvss3_cna_prLLL
cvss3_cna_uiRRR
cvss3_cna_sUUU
cvss3_cna_cNNN
cvss3_cna_iLLL
cvss3_cna_aNNN
cvss3_cna_basescore3.53.53.5
cvss2_cna_avNNN
cvss2_cna_acLLL
cvss2_cna_auSSS
cvss2_cna_ciNNN
cvss2_cna_iiPPP
cvss2_cna_aiNNN
cvss2_cna_basescore444
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiR
cvss3_nvd_sC
cvss3_nvd_cL
cvss3_nvd_iL
cvss3_nvd_aN
cvss3_nvd_basescore5.4

◂ DdaabayoOkusaba Kw'ebintu ByonnaGenda mu maaso ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!