CVE-2024-39210

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-05 · updated 2026-06-17
Weakness: CWE-200

Description

Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application.

Affected products

SourceCodester Best House Rental Management System: through 1.0

References

https://github.com/KRookieSec/CVE-2024-39210
https://github.com/KRookieSec/CVE-2024-39210

Get alerted when CVE-2024-39210 or the next vulnerability affects your stack