CVE-2022-4275CWE-707

House Rental System POST Request search-property.php sql injection

Medium · published December 3, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Weakness
CWE-707 · Improper Neutralization
Published
2022-12-03T00:00Z
EPSS history
Timeline
  • 03 DEC 00:00Z
    House Rental System POST Request search-property.php sql injection
    cvelistv5