2897 matches found
CVE-2020-15535
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...
CVE-2020-15535
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...
CVE-2020-15535
The CVE-2020-15535 entry concerns the WordPress plugin bestsoftinc Car Rental System (up to version 1.3). The vulnerability is a persistent cross-site scripting (XSS) flaw that can be triggered via registration fields in the plugin’s UI, leading to stored XSS. Several connected sources corroborat...
CVE-2020-15535: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...
PT-2020-14485
Name of the Vulnerable Software and Affected Versions bestsoftinc Car Rental System plugin versions through 1.3 for WordPress Description An issue in the bestsoftinc Car Rental System plugin allows persistent XSS to occur via any of the registration fields. Recommendations For bestsoftinc Car...
sg.pioneercarentertainment.com Cross Site Scripting vulnerability OBB-1206195
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
carinsurancequotesmi.info Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180373 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
SQL Injection Vulnerability in Online Car Rental Service System
Online car rental service system is an O2O service platform built based on car rental business scenarios. There is a SQL injection vulnerability in the Online Car Rental Service System, which can be exploited by attackers to obtain sensitive information from the database...
Records with data on 129 million Russian car owners sold on dark web
By Sudais Asif Sensitive data of 129 million car owners located for sale on the dark web. This is a post from HackRead.com Read the original post: Records with data on 129 million Russian car owners sold on dark web...
DaQuanZhouAuto.com PHP website program suffers from SQL injection vulnerability.
DaQuanZhouCar.com PHP whole site program is a used car publishing website developed by PHP+MySQL. DaQuanZhouAuto.com PHP whole site program has SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
Project Worlds Official Car Rental System Code Issue Vulnerability
Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A code issue exists in the upload section of the file manager page in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to run commands on the server via the addcars.php fil...
Project Worlds Official Car Rental System SQL Injection Vulnerability
Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A SQL injection vulnerability exists in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to dump a MySQL database and bypass the login authentication pop-up window...
CVE-2020-11544
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions f...
CVE-2020-11545
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
Design/Logic Flaw
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions f...
Sql injection
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
CVE-2020-11544
Project Worlds Official Car Rental System 1 contains an arbitrary file upload vulnerability in the file-manager upload section (add_cars.php). There are no restrictions on executable file uploads, allowing an admin to run commands on the server with their account. The connected reports confirm th...
CVE-2020-11545
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
CVE-2020-11544: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions f...
CVE-2020-11545: Improper Neutralization of Special Elements used in an SQL Command
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...