Lucene search
K

CVE-2025-4926

๐Ÿ—“๏ธย 19 May 2025ย 09:31:05Reported byย VulDBTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 34ย Views๐ŸŒ WEB

Critical vulnerability in PHPGurukul Car Rental Project allows unrestricted upload via post-avehical.php

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2025-4926
19 May 202509:38
โ€“circl
CNNVD
PHPGurukul Car Rental Project ๅฎ‰ๅ…จๆผๆดž
19 May 202500:00
โ€“cnnvd
CNVD
Car Rental Project Unlimited Upload Vulnerability
22 May 202500:00
โ€“cnvd
Cvelist
CVE-2025-4926 PHPGurukul Car Rental Project post-avehical.php unrestricted upload
19 May 202509:31
โ€“cvelist
EUVD
EUVD-2025-15690
3 Oct 202520:07
โ€“euvd
NVD
CVE-2025-4926
19 May 202510:15
โ€“nvd
OSV
CVE-2025-4926
19 May 202510:15
โ€“osv
Positive Technologies
PT-2025-21930 ยท Unknown ยท Phpgurukul Car Rental Project
19 May 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-4926
21 May 202510:22
โ€“redhatcve
Vulnrichment
CVE-2025-4926 PHPGurukul Car Rental Project post-avehical.php unrestricted upload
19 May 202509:31
โ€“vulnrichment
Rows per page
NVD
Vulners
[
  {
    "vendor": "PHPGurukul",
    "product": "Car Rental Project",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
img1request body/admin/post-avehical.phpUnrestricted file upload via manipulation of image fields.CWE-284,ย CWE-434
img2request body/admin/post-avehical.phpUnrestricted file upload via manipulation of image fields.CWE-284,ย CWE-434
img3request body/admin/post-avehical.phpUnrestricted file upload via manipulation of image fields.CWE-284,ย CWE-434
img4request body/admin/post-avehical.phpUnrestricted file upload via manipulation of image fields.CWE-284,ย CWE-434
img5request body/admin/post-avehical.phpUnrestricted file upload via manipulation of image fields.CWE-284,ย CWE-434

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 May 2025 12:46Current
4.9Medium risk
Vulners AI Score4.9
CVSS 3.14.7 - 7.2
CVSS 45.1
CVSS 25.8
CVSS 34.7
EPSS0.00318
SSVC
34