← Back

Carrental

carrental

Vendor: Carrental Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-9310
1Carrental Project
1Carrental
Jun 17, 2026
Aug 21, 2025
5.5 MEDIUM· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRental_war/druid/login.html of the component D...Show more
A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRental_war/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.Show less
CVE-2023-33517
1Carrental Project
1Carrental
Jun 17, 2026
Oct 23, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).