CR
Product
Car Rental Script
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch
Add Car Rental Script to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17906 | 9.8 | Dec 27 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter Affected: 2.0.8 |
| CVE-2017-17637 | 9.8 | Dec 13 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter Affected: 2.0.4 |
| CVE-2018-20648 | 8.8 | Mar 20 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php Affected: 2.0.8 |
| CVE-2017-17905 | 8.8 | Dec 27 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php Affected: 2.0.8 |
| CVE-2018-20647 | 6.5 | Mar 20 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory Affected: 2.0.8 |
| CVE-2017-17907 | 6.1 | Dec 27 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter Affected: 2.0.8 |
| CVE-2018-15182 | 5.4 | Aug 9 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields Affected: 2.0.8 |
| CVE-2018-6904 | 5.4 | Apr 12 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action Affected: 2.0.8 |
Showing 8
