2897 matches found
Cross site request forgery (csrf)
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
Sql injection
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17906: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17905: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
CVE-2017-17907: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
PHP Scripts Mall Car Rental Script SQL Injection Vulnerability (CNVD-2018-00484)
PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. PHP Scripts Mall Car Rental Script suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the carid parameter in admin/carlistedit.ph...
PHP Scripts Mall Car Rental Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. A cross-site scripting vulnerability exists in PHP Scripts Mall Car Rental Script. The vulnerability can be exploited via the carid parameter in admin/areaedit.php or websitename parameter in...
PHP Scripts Mall Car Rental Script Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. PHP Scripts Mall Car Rental Script suffers from a cross-site request forgery vulnerability. The vulnerability can be exploited to conduct cross-site request forgery attacks via...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
CVE-2017-17905
Vulnerability: CVE-2017-17905 in PHP Scripts Mall Car Rental Script exhibits a Cross-Site Request Forgery (CSRF) through admin/sitesettings.php. Root cause: CSRF flaw allowing unauthorized state-changing requests via the affected admin interface. Impact (as stated): partial to high confidentialit...
CVE-2017-17906
PHP Scripts Mall Car Rental Script suffers an SQL Injection vulnerability in the admin/carlistedit.php carid parameter. The issue allows backend database manipulation, with high impact on confidentiality, integrity, and availability (CVSS v3.0 9.8). No remediation details are provided in the supp...
CVE-2017-17907
CVE-2017-17907 affects PHP Scripts Mall Car Rental Script and is an XSS vulnerability exploitable via the admin/areaedit.php?carid parameter or admin/sitesettings.php?websitename parameter. Public records describe reflected/stored XSS vectors in these parameters, enabling injecting HTML/JS conten...
CVE-2017-17906
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17905
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
PT-2017-15091
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the carid parameter in the "admin/areaedit.php" endpoint...
PT-2017-15090
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the carid parameter in the "admin/carlistedit.php" API endpoint. This allows for potential exploitation...
PT-2017-15089
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a CSRF vulnerability via the "admin/sitesettings.php" endpoint. This means an attacker could potentially manipulate site settings without proper...
synergycarcentre.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-455722 Description| Value ---|--- Affected Website:| synergycarcentre.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
PHP Scripts Mall Car Rental Script SQL Injection Vulnerability
PHP Scripts Mall Car Rental Script is a PHP based car rental website script by PHP Scripts Mall India. The script supports car rental reservation, vehicle type selection and user registration. A SQL injection vulnerability exists in PHP Scripts Mall Car Rental Script version 2.0.4. A remote...
