From 7b3cccb3740ad95e8e59e081c86e0c1fa4243afd Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 17 Jun 2024 03:32:33 +0000
Subject: [PATCH] Publish Advisories

GHSA-chpq-g3q7-fq3j
GHSA-gp2x-43x3-838x
GHSA-rr4p-qrv5-g999
---
 .../GHSA-chpq-g3q7-fq3j.json                  | 50 +++++++++++++++++++
 .../GHSA-gp2x-43x3-838x.json                  | 39 +++++++++++++++
 .../GHSA-rr4p-qrv5-g999.json                  | 46 +++++++++++++++++
 3 files changed, 135 insertions(+)
 create mode 100644 advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json
 create mode 100644 advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json
 create mode 100644 advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json

diff --git a/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json b/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json
new file mode 100644
index 00000000000..e16e3bb0e14
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-chpq-g3q7-fq3j",
+  "modified": "2024-06-17T03:31:06Z",
+  "published": "2024-06-17T03:31:06Z",
+  "aliases": [
+    "CVE-2024-6043"
+  ],
+  "details": "A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268767.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6043"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/yezzzo/y3/blob/main/SourceCodester%20Best%20house%20rental%20management%20system%20project%20in%20php%201.0%20SQL%20Injection.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.268767"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.268767"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.358176"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T01:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json b/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json
new file mode 100644
index 00000000000..cb98eff296e
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gp2x-43x3-838x",
+  "modified": "2024-06-17T03:31:07Z",
+  "published": "2024-06-17T03:31:07Z",
+  "aliases": [
+    "CVE-2024-5163"
+  ],
+  "details": "Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5163"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/blogdetail/267?lang=en_US"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.tecno.com/SRC/securityUpdates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T03:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json b/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json
new file mode 100644
index 00000000000..3e4aeec00c0
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rr4p-qrv5-g999",
+  "modified": "2024-06-17T03:31:07Z",
+  "published": "2024-06-17T03:31:07Z",
+  "aliases": [
+    "CVE-2024-6044"
+  ],
+  "details": "Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6044"
+    },
+    {
+      "type": "WEB",
+      "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-17T03:15:09Z"
+  }
+}
\ No newline at end of file