Rental Bike Script Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rental Bike Script Project records in CISA KEV

No Rental Bike Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2019-05293 CVE-2019-7433 · GHSA-gwqm-q367-vjgc

LOW 39

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00636 Published 2019-03-20 No fix listed CWE-352

TI-2019-05294 CVE-2019-7434 · GHSA-88jf-3wwg-7w8g

LOW 32

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05292 CVE-2019-7432 · GHSA-5fpp-6342-xcp2

LOW 25

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2019-03-20 No fix listed CWE-79