Rental Bike Script Project Rental Bike Script
3 CVEs affecting Rental Bike Script Project Rental Bike Script. Latest disclosed: 2019-03-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7433 | High | 8.8 | 2019-03-21 | PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. |
CVE-2019-7434 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory. |
CVE-2019-7432 | Medium | 5.4 | 2019-03-21 | PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section. |