Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
House Rental System POST Request tenant-engine.php unrestricted upload
Vulnerability Description
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
特权授予不正确
Vulnerability Title
House Rental System 代码问题漏洞
Vulnerability Description
House Rental System是一个房屋租赁管理系统，可实现房源信息的添加修改删除，能够进行下单预定。 House Rental System存在安全漏洞，该漏洞源于组件 POST 请求处理程序的文件 tenant-engine.php 的未知功能，参数id_photo的操作导致不受限制的上传。
CVSS Information
N/A
Vulnerability Type
N/A