Car Rental Script Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Car Rental Script Project records in CISA KEV

No Car Rental Script Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Car Rental Script 8 records MEDIUM

Records

8 records in Car Rental Script · all components

TI-2017-12908 CVE-2017-17637 · GHSA-35jc-cjp6-54c4

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

MEDIUM 46

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2017-12-13 No fix listed CWE-89

TI-2017-13135 CVE-2017-17906 · GHSA-vrx8-jhq5-4c8c

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.

MEDIUM 44

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2017-12-25 No fix listed CWE-89

TI-2018-14665 CVE-2018-20648 · GHSA-j5qf-f39x-68h9

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.

LOW 39

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00636 Published 2019-03-20 No fix listed CWE-352

TI-2017-13134 CVE-2017-17905 · GHSA-p9x7-5g7h-69qv

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.

LOW 39

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00505 Published 2017-12-25 No fix listed CWE-352

TI-2018-14664 CVE-2018-20647 · GHSA-63v8-fmjc-chq5

PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for…

LOW 33

PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01855 Published 2019-03-20 No fix listed CWE-22

TI-2017-13136 CVE-2017-17907 · GHSA-g98w-cm4v-7w9v

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or…

LOW 28

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-12-25 No fix listed CWE-79

TI-2018-10865 CVE-2018-15182 · GHSA-j9xx-mm5h-wf2h

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.

LOW 25

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2018-08-09 No fix listed CWE-79

TI-2018-05040 CVE-2018-6904 · GHSA-hhx5-rpwh-x4j9

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

LOW 25

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-12 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	4
Low	0
No CVSS	0