Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2897 matches found

NVD
NVD•added 2018/01/24 10:29 a.m.•21 views

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

9.8CVSS9.8AI score0.0259EPSS
SaveExploits5References1
OSV
OSV•added 2018/01/24 10:29 a.m.•11 views

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

9.8CVSS5.8AI score0.0259EPSS
SaveExploits5References1
Prion
Prion•added 2018/01/24 10:29 a.m.•20 views

Sql injection

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

7.5CVSS9.8AI score0.0259EPSS
SaveExploits5References1Affected Software1
Cvelist
Cvelist•added 2018/01/24 10:00 a.m.•32 views

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

9.9AI score0.0259EPSS
SaveExploits5References1
CVE
CVE•added 2018/01/24 10:00 a.m.•60 views

CVE-2018-5986

CVE-2018-5986 is an SQL injection in Easy Car Script 2014, triggered by the s_order or s_row parameter to site_search.php. The vulnerability allows injection of SQL commands and is documented in multiple sources (NVD, CNVD, CVE lists) with PoC/exploit references indicating remote exploitation. Co...

9.8CVSS9.8AI score0.0259EPSS
SaveExploits5References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/01/24 12:00 a.m.•4 views

CVE-2018-5986: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

9.8CVSS8.2AI score0.0259EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies•added 2018/01/24 12:00 a.m.•2 views

PT-2018-17272

Name of the Vulnerable Software and Affected Versions: Easy Car Script 2014 Description: The issue exists due to SQL Injection in the s order or s row parameter to the "site search.php" endpoint. Recommendations: For Easy Car Script 2014, avoid using the s order or s row parameters in the "site...

9.8CVSS0.0259EPSS
SaveExploits5References3
zdt
zdt•added 2018/01/24 12:00 a.m.•49 views

Easy Car Script 2014 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

7.5CVSS9.2AI score0.0259EPSS
SaveExploits5
Packet Storm
Packet Storm•added 2018/01/24 12:00 a.m.•49 views

Easy Car Script 2014 SQL Injection

Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Exploit Author: Ihsan Sencan Author Web:...

9.2AI score0.0259EPSS
SaveExploits5
exploitpack
exploitpack•added 2018/01/23 12:00 a.m.•31 views

Easy Car Script 2014 - SQL Injection

Easy Car Script 2014 - SQL Injection Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Explo...

7.5CVSS0.3AI score0.0259EPSS
SaveExploits5
Openbugbounty
Openbugbounty•added 2018/01/14 8:22 p.m.•9 views

rania-rent-car.com XSS vulnerability

Open Bug Bounty ID: OBB-522586 Description| Value ---|--- Affected Website:| rania-rent-car.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/01/07 12:01 p.m.•17 views

cathedralroadcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500269 Description| Value ---|--- Affected Website:| cathedralroadcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
SaveExploits0
Packet Storm
Packet Storm•added 2018/01/03 12:00 a.m.•52 views

Joomla VehicleManager 3.9.15 SQL Injection

Title: Joomla VehicleManager 3.9.15 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/vehiclemanager-basic/ Product: 'Joomla VehicleManager 3.9.15' Developer: OrdaSoft Extension type: Plugin Last...

7.1AI score
SaveExploits0
zdt
zdt•added 2018/01/03 12:00 a.m.•69 views

Joomla VehicleManager 3.9.15 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla VehicleManager 3.9.15 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/vehiclemanager-basic/ Product: 'Joomla VehicleManager...

7.1AI score
SaveExploits0
OSV
OSV•added 2017/12/27 5:08 p.m.•19 views

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

6.1CVSS5.8AI score0.00683EPSS
SaveExploits1References1
OSV
OSV•added 2017/12/27 5:08 p.m.•23 views

CVE-2017-17905

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

8.8CVSS5.8AI score0.00505EPSS
SaveExploits1References1
OSV
OSV•added 2017/12/27 5:08 p.m.•18 views

CVE-2017-17906

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

9.8CVSS5.8AI score0.01161EPSS
SaveExploits1References1
NVD
NVD•added 2017/12/27 5:08 p.m.•37 views

CVE-2017-17905

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

8.8CVSS8.8AI score0.00505EPSS
SaveExploits1References1
NVD
NVD•added 2017/12/27 5:08 p.m.•30 views

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

6.1CVSS6.1AI score0.00683EPSS
SaveExploits1References1
Prion
Prion•added 2017/12/27 5:08 p.m.•26 views

Design/Logic Flaw

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

4.3CVSS6AI score0.00683EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder