Show filters
24 Total Results
Displaying 11-20 of 24
Sort by:
Attacker Value
Unknown

CVE-2022-32024

Disclosure Date: June 02, 2022 (last updated October 07, 2023)
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.
Attacker Value
Unknown

CVE-2022-32022

Disclosure Date: June 02, 2022 (last updated October 07, 2023)
Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.
Attacker Value
Unknown

CVE-2022-32021

Disclosure Date: June 02, 2022 (last updated October 07, 2023)
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=.
Attacker Value
Unknown

CVE-2022-32020

Disclosure Date: June 02, 2022 (last updated October 07, 2023)
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via ip/car-rental-management-system/admin/ajax.php?action=save_settings.
Attacker Value
Unknown

CVE-2022-29318

Disclosure Date: May 11, 2022 (last updated October 07, 2023)
An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Attacker Value
Unknown

CVE-2022-28000

Disclosure Date: April 08, 2022 (last updated February 23, 2025)
Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id parameter.
Attacker Value
Unknown

CVE-2022-28062

Disclosure Date: April 04, 2022 (last updated February 23, 2025)
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.
Attacker Value
Unknown

CVE-2021-46005

Disclosure Date: January 18, 2022 (last updated February 23, 2025)
Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.
Attacker Value
Unknown

CVE-2020-29227

Disclosure Date: December 14, 2020 (last updated November 28, 2024)
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
Attacker Value
Unknown

CVE-2020-29287

Disclosure Date: December 02, 2020 (last updated February 22, 2025)
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.