CAR Rental Management System Project
CAR Rental Management System Project CAR Rental Management System: vulnerabilidades y CVE
CAR Rental Management System Project CAR Rental Management System tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-32019 | Crítica (9.8) | 2.4% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car. |
| CVE-2022-32028 | Alta (7.2) | 5.1% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=. |
| CVE-2022-32027 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=manage_car&id=. |
| CVE-2022-32026 | Alta (7.2) | 5.3% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=. |
| CVE-2022-32025 | Alta (7.2) | 4.6% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=. |
| CVE-2022-32024 | Alta (7.2) | 4.6% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=. |
| CVE-2022-32022 | Alta (7.2) | 4.9% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login. |
| CVE-2022-32021 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=. |
| CVE-2022-32020 | Crítica (9.8) | 2.0% | — | 2 jun 2022 | Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=save_settings. |
| CVE-2022-29318 | Alta (7.2) | 1.5% | — | 11 may 2022 | An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2021-46005 | Media (5.4) | 2.9% | — | 18 ene 2022 | Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter. |
| CVE-2020-29227 | Crítica (9.8) | 17% | — | 14 dic 2020 | An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file… |
| CVE-2020-29287 | Crítica (9.8) | 2.8% | — | 2 dic 2020 | An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php. |
| CVE-2020-27956 | Crítica (9.8) | 5.4% | — | 28 oct 2020 | An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be… |
| CVE-2020-23832 | Media (6.1) | 2.1% | — | 6 oct 2020 | A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an… |