Lucene search
+L

2896 matches found

Vulnrichment
Vulnrichment
•added 2025/07/30 11:02 p.m.•7 views

CVE-2025-8337 code-projects Simple Car Rental System add_vehicles.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

4.8CVSS3.3AI score0.00246EPSS
SaveExploits1References5
OSV
OSV
•added 2025/07/30 10:15 p.m.•12 views

CVE-2025-8335

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS4.8AI score0.0023EPSS
SaveExploits1References5
NVD
NVD
•added 2025/07/30 10:15 p.m.•15 views

CVE-2025-8335

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS0.0023EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/30 10:02 p.m.•31 views

CVE-2025-8335 code-projects Simple Car Rental System cross-site request forgery

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS0.0023EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/30 10:02 p.m.•48 views

CVE-2025-8335

The CVE-2025-8335 entry concerns code-projects Simple Car Rental System 1.0, with a cross-site request forgery flaw affecting an unknown part of the software. Connected sources (PT-2025-31451, Red Hat, CVE listings) confirm the vulnerability can be initiated remotely and that an exploit has been ...

5.3CVSS7AI score0.0023EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/30 10:02 p.m.•9 views

CVE-2025-8335 code-projects Simple Car Rental System cross-site request forgery

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS4.6AI score0.0023EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/07/30 12:59 a.m.•26 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS7.4AI score0.00325EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/30 12:59 a.m.•22 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS7.4AI score0.0039EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/30 12:00 a.m.•18 views

Car Rental Project Session Hijacking Vulnerability

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00325EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/30 12:00 a.m.•16 views

Code-Projects Simple Car Rental System 代码注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A code injection vulnerability exists in code-projects Simple Car Rental System version 1.0, which results from a cross-site scripting attack due to an incorrect operation of the parameter carname in...

5.4CVSS4.3AI score0.00246EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•4 views

CVE-2025-8335: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS5.3AI score0.0023EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•5 views

CVE-2025-8337: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

5.4CVSS3.9AI score0.00246EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/30 12:00 a.m.•15 views

code-projects Simple Car Rental System 安全漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in code-projects Simple Car Rental System version 1.0, which stems from vulnerability to cross-site request forgery attacks...

5.3CVSS4.9AI score0.0023EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/30 12:00 a.m.•28 views

PT-2025-31453 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue has been found in the processing of the /admin/add vehicles.php file. Manipulation of the car name argument can lead to cross site scripting. The attack can be initiated...

5.4CVSS3.7AI score0.00246EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/07/30 12:00 a.m.•20 views

PT-2025-31451 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue exists in Simple Car Rental System that allows for cross-site request forgery. This issue can be initiated remotely, and the exploit has been publicly disclosed...

5.3CVSS4.4AI score0.0023EPSS
SaveExploits1References9
OSV
OSV
•added 2025/07/28 8:17 p.m.•17 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00325EPSS
SaveExploits1References3
NVD
NVD
•added 2025/07/28 8:17 p.m.•17 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS0.00325EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/28 5:15 p.m.•16 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.0039EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/07/28 12:00 a.m.•25 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

0.0039EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/28 12:00 a.m.•46 views

CVE-2025-50494

The PHPGurukul Car Washing Management System v1.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /doctor/change-password.php component. Attackers can exploit this flaw to take over active sessions. Remediation involves addressing the session invalidation l...

7.5CVSS6.7AI score0.0039EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder