Publish Advisories

GHSA-chpq-g3q7-fq3j GHSA-gp2x-43x3-838x GHSA-rr4p-qrv5-g999
2026-05-22 18:04:22 -07:00 · 2024-06-17 03:32:33 +00:00
parent b226acded4
commit 7b3cccb374
3 changed files with 135 additions and 0 deletions
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-chpq-g3q7-fq3j",
+  "modified": "2024-06-17T03:31:06Z",
+  "published": "2024-06-17T03:31:06Z",
+  "aliases": [
+    "CVE-2024-6043"
+  ],
+  "details": "A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268767.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6043"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/yezzzo/y3/blob/main/SourceCodester%20Best%20house%20rental%20management%20system%20project%20in%20php%201.0%20SQL%20Injection.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.268767"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.268767"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.358176"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T01:15:49Z"
+  }
+}
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gp2x-43x3-838x",
+  "modified": "2024-06-17T03:31:07Z",
+  "published": "2024-06-17T03:31:07Z",
+  "aliases": [
+    "CVE-2024-5163"
+  ],
+  "details": "Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5163"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/blogdetail/267?lang=en_US"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/securityUpdates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T03:15:09Z"
+  }
+}
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rr4p-qrv5-g999",
+  "modified": "2024-06-17T03:31:07Z",
+  "published": "2024-06-17T03:31:07Z",
+  "aliases": [
+    "CVE-2024-6044"
+  ],
+  "details": "Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6044"
+    },
+    {
+      "type": "WEB",
+      "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T03:15:09Z"
+  }
+}