Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior

Críticas / altas1313▼ 190 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior

85 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-20648	Modificada	Alta (8.8)	0.64%	—	CAR Rental Script Project CAR Rental Script	21/3/2019	17/6/2026	PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.
CVE-2018-20647	Modificada	Media (6.5)	1.9%	—	CAR Rental Script Project CAR Rental Script	21/3/2019	17/6/2026	PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.
CVE-2018-15182	Modificada	Media (5.4)	0.55%	—	CAR Rental Script Project CAR Rental Script	9/8/2018	17/6/2026	PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
CVE-2018-6904	Modificada	Media (5.4)	0.51%	—	CAR Rental Script Project CAR Rental Script	12/4/2018	17/6/2026	PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
CVE-2017-17907	Modificada	Media (6.1)	0.68%	—	CAR Rental Script Project CAR Rental Script	27/12/2017	17/6/2026	PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.
CVE-2017-17906	Modificada	Crítica (9.8)	1.2%	—	CAR Rental Script Project CAR Rental Script	27/12/2017	17/6/2026	PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
CVE-2017-17905	Modificada	Alta (8.8)	0.51%	—	CAR Rental Script Project CAR Rental Script	27/12/2017	17/6/2026	PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
CVE-2017-17637	Modificada	Crítica (9.8)	2.2%	💥 Exploit	CAR Rental Script Project CAR Rental Script	13/12/2017	17/6/2026	Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
CVE-2017-2171	Modificada	Media (6.1)	0.89%	—	Bestwebsoft Captcha Bestwebsoft CAR Rental Bestwebsoft Contact Form Bestwebsoft Contact Form Multi+47	22/5/2017	17/6/2026	Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2,…
CVE-2010-0631	Modificada	Alta (7.5)	0.91%	💥 Exploit	Eicrasoft Eicra CAR Rental-script	12/2/2010	16/6/2026	Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters.