From 4065aa53b07ed1758b3ba2f1a667938642b54917 Mon Sep 17 00:00:00 2001 From: Marc Ruef Date: Sat, 3 Dec 2022 17:07:47 +0100 Subject: [PATCH] CVE-2022-4274 - CVE-2022-4276 --- 2022/4xxx/CVE-2022-4274.json | 61 ++++++++++++++++++++++++++++++++++-- 2022/4xxx/CVE-2022-4275.json | 61 ++++++++++++++++++++++++++++++++++-- 2022/4xxx/CVE-2022-4276.json | 61 ++++++++++++++++++++++++++++++++++-- 3 files changed, 174 insertions(+), 9 deletions(-) diff --git a/2022/4xxx/CVE-2022-4274.json b/2022/4xxx/CVE-2022-4274.json index fbfedf258a6..5a46eaff960 100644 --- a/2022/4xxx/CVE-2022-4274.json +++ b/2022/4xxx/CVE-2022-4274.json @@ -4,14 +4,69 @@ "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2022-4274", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "TITLE": "House Rental System view-property.php sql injection", + "REQUESTER": "cna@vuldb.com", + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" + }, + "generator": "vuldb.com", + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "", + "product": { + "product_data": [ + { + "product_name": "House Rental System", + "version": { + "version_data": [ + { + "version_value": "n\/a" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-707 Improper Neutralization -> CWE-74 Injection -> CWE-89 SQL Injection" + } + ] + } + ] }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file \/view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability." + } + ] + }, + "impact": { + "cvss": { + "version": "3.1", + "baseScore": "6.3", + "vectorString": "CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:L" + } + }, + "references": { + "reference_data": [ + { + "url": "https:\/\/github.com\/nikeshtiwari1\/House-Rental-System\/issues\/6" + }, + { + "url": "https:\/\/vuldb.com\/?id.214770" } ] } diff --git a/2022/4xxx/CVE-2022-4275.json b/2022/4xxx/CVE-2022-4275.json index a2e7bfccd05..9100780b828 100644 --- a/2022/4xxx/CVE-2022-4275.json +++ b/2022/4xxx/CVE-2022-4275.json @@ -4,14 +4,69 @@ "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2022-4275", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "TITLE": "House Rental System POST Request search-property.php sql injection", + "REQUESTER": "cna@vuldb.com", + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" + }, + "generator": "vuldb.com", + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "", + "product": { + "product_data": [ + { + "product_name": "House Rental System", + "version": { + "version_data": [ + { + "version_value": "n\/a" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-707 Improper Neutralization -> CWE-74 Injection -> CWE-89 SQL Injection" + } + ] + } + ] }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771." + } + ] + }, + "impact": { + "cvss": { + "version": "3.1", + "baseScore": "6.3", + "vectorString": "CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:L" + } + }, + "references": { + "reference_data": [ + { + "url": "https:\/\/github.com\/nikeshtiwari1\/House-Rental-System\/issues\/7" + }, + { + "url": "https:\/\/vuldb.com\/?id.214771" } ] } diff --git a/2022/4xxx/CVE-2022-4276.json b/2022/4xxx/CVE-2022-4276.json index 2f508252e92..2f53125d068 100644 --- a/2022/4xxx/CVE-2022-4276.json +++ b/2022/4xxx/CVE-2022-4276.json @@ -4,14 +4,69 @@ "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2022-4276", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "TITLE": "House Rental System POST Request tenant-engine.php unrestricted upload", + "REQUESTER": "cna@vuldb.com", + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" + }, + "generator": "vuldb.com", + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "", + "product": { + "product_data": [ + { + "product_name": "House Rental System", + "version": { + "version_data": [ + { + "version_value": "n\/a" + } + ] + } + } + ] + } + } + ] + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-266 Incorrect Privilege Assignment -> CWE-284 Improper Access Controls -> CWE-434 Unrestricted Upload" + } + ] + } + ] }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772." + } + ] + }, + "impact": { + "cvss": { + "version": "3.1", + "baseScore": "6.3", + "vectorString": "CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:L\/I:L\/A:L" + } + }, + "references": { + "reference_data": [ + { + "url": "https:\/\/github.com\/nikeshtiwari1\/House-Rental-System\/issues\/8" + }, + { + "url": "https:\/\/vuldb.com\/?id.214772" } ] }