Car Rental Script Project Car Rental Script
8 CVEs affecting Car Rental Script Project Car Rental Script. Latest disclosed: 2019-03-21. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17906 | Critical | 9.8 | 2017-12-27 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. |
CVE-2017-17637 | Critical | 9.8 | 2017-12-13 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. |
CVE-2018-20648 | High | 8.8 | 2019-03-21 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php. |
CVE-2017-17905 | High | 8.8 | 2017-12-27 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. |
CVE-2018-20647 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory. |
CVE-2017-17907 | Medium | 6.1 | 2017-12-27 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter. |
CVE-2018-15182 | Medium | 5.4 | 2018-08-09 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. |
CVE-2018-6904 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. |