2897 matches found
CVE-2022-28000
Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /CarRental/booking.php via the id parameter...
CVE-2022-28000: Improper Neutralization of Special Elements used in an SQL Command
Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /CarRental/booking.php via the id parameter...
PT-2022-18740
Name of the Vulnerable Software and Affected Versions Car Rental System version 1.0 Description The issue is related to a SQL injection vulnerability. It affects the /Car Rental/booking.php endpoint via the id parameter. Recommendations For Car Rental System version 1.0, consider restricting acce...
Car Rental System 1.0 SQL Injection Vulnerability
Car Rental System SQL Injection Author: D4rkP0w4r Note = Login to customer Injection Point = http://192.168.1.101:8080/CarRental/booking.php?id=1 Exploit Exploit with Sqlmap + Burp Suite Use Burp Suite capture request Then save as sqlicar.txt GET /CarRental/booking.php?id=1 HTTP/1.1 Host:...
Car Rental System SQL注入漏洞
Car Rental System is a car rental system by individual developer AMEY THAKUR in India. car Rental System v1.0 is vulnerable to SQL injection, which originates from the lack of SQL data filtering for the id parameter in /CarRental/booking.php, and can be exploited by attackers to execute illegal S...
CVE-2022-28062
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
CVE-2022-28062
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
CVE-2022-28062
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
Design/Logic Flaw
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
CVE-2022-28062
CVE-2022-28062 affects Car Rental System v1.0. The vulnerability is an arbitrary file upload via the Add Car component, enabling an attacker to upload a webshell and execute arbitrary code. The provided connected records corroborate this issue across multiple sources; no remediation, patch versio...
CVE-2022-28062
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
Car Rental System 代码问题漏洞
Car Rental System is a car rental system by AMEY THAKUR, an individual developer in India. A security vulnerability exists in Car Rental System v1.0, which stems from a missing file upload restriction in the Add Car component. An attacker can use this vulnerability to upload a webshell and execut...
PT-2022-18788
Name of the Vulnerable Software and Affected Versions Car Rental System version 1.0 Description The issue concerns an arbitrary file upload vulnerability via the Add Car component, allowing attackers to upload a webshell and execute arbitrary code. Recommendations For Car Rental System version 1....
CVE-2022-28062: Unrestricted Upload of File with Dangerous Type
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code...
car-business.nl Improper Access Control vulnerability OBB-2421664
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts
Details have been disclosed about a now-addressed critical vulnerability in Microsoft's Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control. "This attack could mean full control over resources and data belonging to the...
Car Driving School Management 1.0 SQL Injection Vulnerability
Title: Car Driving School Management v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15070/car-driving-school-management-system-phpoop-free-source-code.html Reference:...
Car Driving School Management System Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Car Driving School Management System, a driving school management system, which stems from the fact that the product's User Enrollment Form does not effectively filter user input data and can be exploited by attackers to The vulnerability causes...
Car Driving School Management System SQL Injection Vulnerability
A SQL injection vulnerability exists in Car Driving School Management System, a driving school management system, which stems from the fact that the product login page does not effectively filter special characters in user input data, and can be exploited to execute malicious An attacker can...