← Back

Car Rental Management System Project

car_rental_management_system_project

15 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Car Rental Management System
car_rental_management_system
15 CVEs

CVEs (15)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-32019
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.
CVE-2022-32028
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=.
CVE-2022-32027
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=manage_car&id=.
CVE-2022-32026
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.
CVE-2022-32025
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.
CVE-2022-32024
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.
CVE-2022-32022
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.
CVE-2022-32021
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=.
CVE-2022-32020
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=save_settings.
CVE-2022-29318
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
May 11, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2021-46005
1Car Rental Management System Project
1Car Rental Management System
Nov 21, 2024
Jan 18, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.
CVE-2020-29227
1Car Rental Management System Project
1Car Rental Management System
Jun 17, 2026
Dec 14, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file in...Show more
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.Show less
CVE-2020-29287
1Car Rental Management System Project
1Car Rental Management System
Jun 17, 2026
Dec 2, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.
CVE-2020-27956
1Car Rental Management System Project
1Car Rental Management System
Jun 17, 2026
Oct 28, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be upl...Show more
An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be uploaded to admin/assets/uploads/ (under the web root).Show less
CVE-2020-23832
1Car Rental Management System Project
1Car Rental Management System
Jun 17, 2026
Oct 6, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an...Show more
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.Show less