CVE-2020-29227

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...

Remote code execution

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...

CVE-2020-29227

CVE-2020-29227 affects Car Rental Management System 1.0. An unauthenticated user can perform a local file inclusion via the /index.php page by supplying a partial filename in the page parameter, resulting in remote code execution on the server. This vulnerability is corroborated by multiple sourc...

CVE-2020-29227

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...

PT-2020-17111 · Unknown · Car Rental Management System

Name of the Vulnerable Software and Affected Versions: Car Rental Management System version 1.0 Description: An issue was discovered in the Car Rental Management System where an unauthenticated user can perform a file inclusion attack against the "/index.php" file with a partial filename in the...

CVE-2020-29227: Undefined Security Weakness

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...

Sourcecodester Car Rental Management System 输入验证错误漏洞

Sourcecodester Car Rental Management System is a car rental management system from Sourcecodester USA. A security vulnerability exists in version 1.0 of the SourceCodester Car Rental Management System, which can be exploited by an unauthenticated user to perform a file inclusion attack on the...

Elevation of Privilege Vulnerability in CAXA CNC Turning v2015

CAXA CNC Car is an industrial automation CNC graphic design tool. CAXA CNC Car v2015 has an elevation of privilege vulnerability that can be exploited by attackers to execute arbitrary code and elevate privileges...

SQL Injection Vulnerability in the Website System of Tianjin Guide Car Intelligent Equipment Co.

Tianjin Guide Car Intelligent Equipment Co., Ltd. is a modern high-tech company integrating sales of instrumentation products, engineering design and management consulting. There is a SQL injection vulnerability in the website building system of Tianjin Guidance Vehicle Intelligent Equipment Co. ...

Arbitrary File Deletion Vulnerability in simcms us***.php File

simcms is a solution for used car website based on PHP+MYSQL. The simcms us.php file has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Proxymedia Car Rental Management System SQL Injection Vulnerability

Car Rental Management System is a PHP/MySQLi based car rental management system. SQL injection vulnerability exists in Car Rental Management System 1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via the id parameter in viewcar.php or the carid parameter in...

Cross-site scripting vulnerability in simcms (CNVD-2020-70840)

simcms is a solution for used car website based on PHP+MYSQL. A cross-site scripting vulnerability exists in simcms. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

CVE-2020-29287

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...

CVE-2020-29287

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...

Sql injection

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...

CVE-2020-29287

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...

CVE-2020-29287

CVE-2020-29287 describes an SQL injection in Car Rental Management System v1.0 exploitable via unsanitized input parameters: id in view_car.php and car_id in booking.php. The vulnerability stems from improper input handling in these PHP scripts, allowing attackers to manipulate SQL queries. Sever...

PT-2020-17135

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description An SQL injection issue was found in the Car Rental Management System. This can be exploited through the id parameter in "view car.php" or the car id parameter in "booking.php". Recommendatio...

Sourcecodester SourceCodester Car Rental Management System SQL注入漏洞

Car Rental Management System is a PHP/MySQLi based car rental management system. SQL injection vulnerability exists in Car Rental Management System 1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via the id parameter in viewcar.php or the carid parameter in...

CVE-2020-29287: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...