CVE-2017-17637

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...

Sql injection

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...

CVE-2017-17637

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...

CVE-2017-17637

CVE-2017-17637 affects Car Rental Script 2.0.4 with an SQL Injection in the countrycode1.php file via the val parameter. Multiple sources (NVD, CNVD, CVE lists, related CNVD and PRION records) corroborate a vulnerability in this script where user-supplied input is used in SQL without proper sanit...

PT-2017-14933

Name of the Vulnerable Software and Affected Versions Car Rental Script version 2.0.4 Description The issue is related to SQL Injection, which occurs via the val parameter in the countrycode1.php file. Recommendations For Car Rental Script version 2.0.4, avoid using the val parameter in the...

CVE-2017-17637: Improper Neutralization of Special Elements used in an SQL Command

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...

CVE-2017-16691

SAP Note Assistant tool SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52 supports upload of digitally signed note file of type 'SAR'. The digital signature verification is done together with the extraction of note file contained in the SAR archive. It is possible...

Car Rental Script 2.0.4 SQL Injection

Exploit Title: Car Rental Script 2.0.4 - SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/car-rental-script/ Version: 2.0.4 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihs...

universal-car-credit.com XSS vulnerability

Open Bug Bounty ID: OBB-449390 Description| Value ---|--- Affected Website:| universal-car-credit.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

landfordcarcentre.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-448178 Description| Value ---|--- Affected Website:| landfordcarcentre.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

porscheofstratham.com XSS vulnerability

Open Bug Bounty ID: OBB-436233 Description| Value ---|--- Affected Website:| porscheofstratham.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Daphne Caruana Galizia's Murder and the Security of WhatsApp

Daphne Caruana Galizia was a Maltese journalist whose anti-corruption investigations exposed powerful people. She was murdered in October by a car bomb. Galizia used WhatsApp to communicate securely with her sources. Now that she is dead, the Maltese police want to break into her phone or the app...

pick-a-car.co.uk XSS vulnerability

Vulnerable URL: http://www.pick-a-car.co.uk/searchpage.php?make==any+model=%27%22%3e%3csvg/onload=confirm/openbugbounty/%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

riversidecarsales.co.uk XSS vulnerability

Vulnerable URL: http://www.riversidecarsales.co.uk/searchpage.php?make==any+model=%27%22%3e%3csvg/onload=confirm/openbugbounty/%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5571638 VIP website status:| No...

Cloud Energy App has SMS Bombing Vulnerability

Cloud Energy App is a software about car rental service. There is an SMS bombing vulnerability in Cloud Energy App. An attacker can exploit the vulnerability to replay packets sending verification codes without restriction and bombard the client with SMS...

littlecarcompany.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390983 Description| Value ---|--- Affected Website:| littlecarcompany.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cheshiremotorcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390949 Description| Value ---|--- Affected Website:| cheshiremotorcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

car-hunters.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390915 Description| Value ---|--- Affected Website:| car-hunters.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

cliffordcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390912 Description| Value ---|--- Affected Website:| cliffordcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

edinburghcarstore.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390904 Description| Value ---|--- Affected Website:| edinburghcarstore.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...