CVE-2023-3694

A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /index.php. The manipulation of the argument keywords/location leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://github.com/safetom6/House-Rental-and-Property-Listing-System/blob/main/House%20Rental%20and%20Property%20Listing%20System%20index.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.234245Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234245Third Party Advisory
• https://vuldb.com/?submit.183316
• https://github.com/safetom6/House-Rental-and-Property-Listing-System/blob/main/House%20Rental%20and%20Property%20Listing%20System%20index.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.234245Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234245Third Party Advisory

Published

Jul 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36932In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021…8.1
• CVE-2023-36933In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1…7.5
• CVE-2023-36934In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021…9.1
• CVE-2023-36935Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-36936Cross-Site Scripting (XSS) vulnerability in PHPGurukul Onlin…6.1
• CVE-2023-36939Cross-Site Scripting (XSS) vulnerability in Hostel Managemen…6.1
• CVE-2023-36940Cross Site Scripting (XSS) vulnerability in PHPGurukul Onlin…4.8
• CVE-2023-36941A cross-site scripting (XSS) vulnerability in PHPGurukul Onl…6.1
• CVE-2023-36942A cross-site scripting (XSS) vulnerability in PHPGurukul Onl…6.1
• CVE-2023-36947TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V…9.8
• CVE-2023-3695A vulnerability classified as critical has been found in Cam…9.8
• CVE-2023-36950TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V…9.8