CR
Product
Car Rental Script
by Car Rental Script Project · last CVE Mar 20, 2019
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch

Add Car Rental Script to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-17906
9.8
1%
Dec 27
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter
Affected: 2.0.8
CVE-2017-17637
9.8
2%
Dec 13
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter
Affected: 2.0.4
CVE-2018-20648
8.8
1%
Mar 20
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php
Affected: 2.0.8
CVE-2017-17905
8.8
1%
Dec 27
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php
Affected: 2.0.8
CVE-2018-20647
6.5
2%
Mar 20
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory
Affected: 2.0.8
CVE-2017-17907
6.1
1%
Dec 27
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter
Affected: 2.0.8
CVE-2018-15182
5.4
1%
Aug 9
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields
Affected: 2.0.8
CVE-2018-6904
5.4
1%
Apr 12
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action
Affected: 2.0.8
Showing 8