CNNVD-202601-5050 Information
CNNVD ID
CNNVD-202601-5050
Related CVE
- CNNVD Published: 2026-01-30
Description (Chinese)
Projectworlds House Rental and Property Listing是Projectworlds开源的一个房屋租赁和房产上市系统。 Projectworlds House Rental and Property Listing 1.0版本存在代码注入漏洞，该漏洞源于对文件/app/sms.php中参数Message的错误操作，可能导致跨站脚本攻击。
Description (English)
Projectworlds House Rental and Property Listing is a rental and property listing system that is open to Projectworlds. Projectworlds HouseRental and PropertyListing Version 1.0 contains a code-injection loophole, which results from an error in Message, the parameter in the document/app/sms.php, and may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Projectworlds
Published
2026-01-30
Last Modified
2026-02-24
References
https://github.com/jiahao412/CVE/issues/3 https://vuldb.com/?ctiid.343490 https://vuldb.com/?id.343490 https://vuldb.com/?submit.741977 https://access.redhat.com/security/cve/cve-2026-1700
Share on: