{"id":"CVE-2024-2917","aliases":["EUVD-2024-27860","GHSA-m8x6-hrv6-g3cv"],"status":"published","title":"Campcodes House Rental Management System index.php file inclusion","description":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00774,"percentile":0.56061,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-73"],"published":"2024-03-26T23:00:07Z","modified":"2026-06-17T07:25:49Z","products":[{"vendor":"campcodes","product":"house rental management system"},{"vendor":"campcodes","product":"house_rental_management_system"},{"vendor":"oretnom23","product":"house_rental_management_system"},{"vendor":"sourcecodester","product":"house rental management system"}],"references":[{"url":"https://vuldb.com/?id.257983","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.257983","tags":["signature","permissions-required","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.303672","tags":["third-party-advisory","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/E1CHO/cve_hub/blob/main/House%20Rental%20Management%20System%20-%20vuln%202.pdf","tags":["exploit","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2917"},{"url":"https://github.com/advisories/GHSA-m8x6-hrv6-g3cv"}],"sources":{"cve":[{"id":"CVE-2024-2917","title":"Campcodes House Rental Management System index.php file inclusion","description":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.","status":"published","published":"2024-03-26T23:00:07.496Z","modified":"2024-08-01T19:25:42.152Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"},{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","assessor":"cna"}],"cwes":["CWE-73"],"updated_at":"2026-11-02T14:34:09.897248Z"}],"euvd":[{"id":"EUVD-2024-27860","description":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.","status":"published","published":"2024-03-26T23:00:07Z","modified":"2024-08-01T19:25:42Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T03:50:39.455816Z"}],"ghsa":[{"id":"GHSA-m8x6-hrv6-g3cv","title":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared...","description":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.","status":"published","published":"2024-03-27T00:30:56Z","modified":"2024-03-27T00:31:04Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-73"],"updated_at":"2026-11-02T14:55:43.067988Z"}],"nvd":[{"id":"CVE-2024-2917","description":"A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257983.","status":"published","published":"2024-03-26T23:15:47.583Z","modified":"2026-06-17T07:25:49.303Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-73"],"updated_at":"2026-11-02T14:09:43.052376Z"}]}}