Car Rental Management System Project

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Car Rental Management System Project records in CISA KEV

No Car Rental Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Car Rental Management System 15 records MEDIUM

Records

15 records

TI-2020-17603 CVE-2020-29227 · GHSA-jmfv-2476-jhcq

An issue was discovered in Car Rental Management System 1.0.

MEDIUM 59

An issue was discovered in Car Rental Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16822 Published 2020-12-14 No fix listed

TI-2020-17008 CVE-2020-27956 · GHSA-hg78-9p95-85mv

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental…

MEDIUM 50

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be upl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05374 Published 2020-10-28 No fix listed CWE-434

TI-2022-13802 CVE-2022-32019 · GHSA-2hr9-g6r3-jv5j

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via…

MEDIUM 47

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02597 Published 2022-06-02 No fix listed CWE-434

TI-2020-17630 CVE-2020-29287 · GHSA-w3f4-m5x7-jjxh

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be…

MEDIUM 47

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02755 Published 2020-12-02 No fix listed CWE-89

TI-2022-13803 CVE-2022-32020 · GHSA-9rpc-qxwj-wqvg

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via…

MEDIUM 46

Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=save_settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02097 Published 2022-06-02 No fix listed

TI-2022-13810 CVE-2022-32028 · GHSA-2xxw-6qjm-9qhq

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

MEDIUM 40

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05059 Published 2022-06-02 No fix listed CWE-89

TI-2022-13808 CVE-2022-32026 · GHSA-63mp-qp8c-2952

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

MEDIUM 40

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05308 Published 2022-06-02 No fix listed CWE-89

TI-2022-13807 CVE-2022-32025 · GHSA-m74p-gc82-xfpj

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

LOW 39

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04563 Published 2022-06-02 No fix listed CWE-89

TI-2022-13806 CVE-2022-32024 · GHSA-r4hh-3jp6-hhm7

Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.

LOW 39

Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04563 Published 2022-06-02 No fix listed CWE-89

TI-2022-13805 CVE-2022-32022 · GHSA-wvxj-p4pm-5fwq

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

LOW 39

Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04923 Published 2022-06-02 No fix listed CWE-89

TI-2022-11830 CVE-2022-29318 · GHSA-8mrj-4hp3-p7pw

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management…

LOW 35

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01468 Published 2022-05-11 No fix listed CWE-434

TI-2022-13809 CVE-2022-32027 · GHSA-qmh4-39gf-4vq2

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

LOW 34

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=manage_car&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01011 Published 2022-06-02 No fix listed CWE-89

TI-2022-13804 CVE-2022-32021 · GHSA-x6h3-3mx9-c28m

Car Rental Management System v1.0 is vulnerable to SQL Injection via…

LOW 34

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01011 Published 2022-06-02 No fix listed CWE-89

TI-2020-14683 CVE-2020-23832 · GHSA-hhfh-44xw-558f

A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in…

LOW 31

A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02109 Published 2020-10-06 No fix listed CWE-79

TI-2021-20992 CVE-2021-46005 · GHSA-fcjq-wp7x-fvhg

Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting…

LOW 30

Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02891 Published 2022-01-18 No fix listed CWE-79

Open these records in search →

Critical	5
High	8
Medium	2
Low	0
No CVSS	0