CR
Vendor
Car Rental Script Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-20648 | CR Car Rental Script Car Rental Script Project | 8.8 | Mar 20 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php |
| CVE-2018-20647 | CR Car Rental Script Car Rental Script Project | 6.5 | Mar 20 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory |
| CVE-2018-15182 | CR Car Rental Script Car Rental Script Project | 5.4 | Aug 9 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields |
| CVE-2018-6904 | CR Car Rental Script Car Rental Script Project | 5.4 | Apr 12 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action |
| CVE-2017-17907 | CR Car Rental Script Car Rental Script Project | 6.1 | Dec 27 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter |
| CVE-2017-17906 | CR Car Rental Script Car Rental Script Project | 9.8 | Dec 27 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter |
| CVE-2017-17905 | CR Car Rental Script Car Rental Script Project | 8.8 | Dec 27 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php |
| CVE-2017-17637 | CR Car Rental Script Car Rental Script Project | 9.8 | Dec 13 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter |