3 matches found
CVE-2024-51224: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the vehiclename, modelnumber, regnumber, vehiclesubtype,...
CVE-2025-44182: Improper Neutralization of Input During Web Page Generation
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code...
CVE-2024-57488: Improper Neutralization of Input During Web Page Generation
Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...