CVE-2024-57487: Improper Control of Generation of Code

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

CVE-2024-57487

The Code-Projects Online Car Rental System 1.0 is vulnerable to an authenticated remote code execution (RCE) flaw within its file upload feature. The root cause is a failure to validate file extensions or MIME types , specifically on the changeimage1.php endpoint. This allows an authenticated att...

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . An authenticated attacker can inject malicious JavaScript payloads through the vehicalorcview parameter in the /admin/edit-vehicle.php endpoint. These payloads are persisted in the system and execute w...

CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

Car Rental System 1.0 File Upload RCE (Authenticated)

This module exploits an authenticated remote code execution vulnerability in the Online Car Rental System 1.0 via the changeimage1.php endpoint. An authenticated attacker can upload malicious PHP scripts without proper validation, enabling arbitrary code execution on the server. Module Options ms...

CVE-2024-53345

An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code via uploading a crafted file...

Car Rental Management System 代码问题漏洞

Car Rental Management System is an open source car rental management system from CampCodes. A security vulnerability exists in Car Rental Management System versions v1.0 through v1.3, which stems from an authenticated arbitrary file upload vulnerability that allows an attacker to execute arbitrar...

CVE-2024-53345

An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-53345

An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-53345

The Car Rental Management System (versions v1.0 to v1.3 ) contains a critical arbitrary file upload vulnerability in the System Settings module. Due to inadequate file type validation and improper access control on the uploads directory, low-privileged users can upload executable PHP scripts. Att...

CVE-2024-53345: Unrestricted Upload of File with Dangerous Type

An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-12998

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2024-12998

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2024-12998

CVE-2024-12998 affects Code-Projects Online Car Rental System 1.0. A cross-site scripting vulnerability exists in an unknown part of the /index.php file within the GET Parameter Handler. The issue allows remote initiation of an attack and has public disclosure. Connected sources consistently desc...

CVE-2024-12998 code-projects Online Car Rental System GET Parameter index.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2024-12998 code-projects Online Car Rental System GET Parameter index.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

Code-Projects Online Car Rental System 代码注入漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A code injection vulnerability exists in Code-Projects Online Car Rental System version 1.0, which originates from a cross-site scripting vulnerability contained in multiple parameters of the /index.php...

PT-2024-17858

Name of the Vulnerable Software and Affected Versions code-projects Online Car Rental System version 1.0 Description A problematic issue was found in the code-projects Online Car Rental System, affecting an unknown part of the file /index.php of the component GET Parameter Handler. This issue lea...

CVE-2024-12998: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...