CAR Rental Script Project
CAR Rental Script Project CAR Rental Script: vulnerabilidades y CVE
CAR Rental Script Project CAR Rental Script tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-20648 | Alta (8.8) | 0.64% | — | 21 mar 2019 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php. |
| CVE-2018-20647 | Media (6.5) | 1.9% | — | 21 mar 2019 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory. |
| CVE-2018-15182 | Media (5.4) | 0.55% | — | 9 ago 2018 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. |
| CVE-2018-6904 | Media (5.4) | 0.51% | — | 12 abr 2018 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. |
| CVE-2017-17907 | Media (6.1) | 0.68% | — | 27 dic 2017 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter. |
| CVE-2017-17906 | Crítica (9.8) | 1.2% | — | 27 dic 2017 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. |
| CVE-2017-17905 | Alta (8.8) | 0.51% | — | 27 dic 2017 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. |
| CVE-2017-17637 | Crítica (9.8) | 2.2% | — | 13 dic 2017 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. |