CVE-2025-6667

CVE-2025-6667 affects Code-Projects Car Rental System 1.0. The vulnerability lies in the file /admin/add_cars.php where the image parameter can be manipulated to achieve unrestricted file upload. This enables remote exploitation and may allow attackers to upload arbitrary files, potentially impac...

CVE-2025-6667: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit h...

PT-2025-26907 · Unknown · Car Rental System

Name of the Vulnerable Software and Affected Versions: Car Rental System version 1.0 Description: A critical issue was found in the Car Rental System, affecting some unknown functionality of the file /admin/add cars.php. The manipulation of the image argument leads to unrestricted upload. This...

Code-Projects Car Rental System 代码问题漏洞

Car Rental System is a car rental system. Car Rental System has a file upload vulnerability that stems from a lack of valid validation of uploaded files by the parameter image in the file /admin/addcars.php. An attacker can use this vulnerability to upload malicious files...

CVE-2025-6579

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6579

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6579

CVE-2025-6579 affects code-projects Car Rental System 1.0. The issue is SQL injection in the message_admin.php file triggered by manipulating the Message parameter, exploitable remotely. Multiple sources confirm the vulnerability and its critical impact, targeting database data via unauthenticate...

CVE-2025-6579 code-projects Car Rental System message_admin.php sql injection

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6579 code-projects Car Rental System message_admin.php sql injection

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

SONY XAV-AX8500 Integer Overflow Vulnerability

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from an integer overflow vulnerability that originates from improper Bluetooth packet handling resulting in an integer overflow that can be exploited by an attacker to execute arbitrary code...

PT-2025-26789 · Code Projects · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue affects the processing of the file /message admin.php, where the manipulation of the Message argument leads to SQL injection. The attack can be initiated remotely...

Code-Projects Car Rental System 注入漏洞

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the messageadmin.php file's parameter Message. An attacker can use this vulnerability to execute illegal SQL commands...

CVE-2025-6284

A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

SIFUSM BD S1 安全漏洞

SIFUSM BD S1 is a car recorder from SIFUSM. A security vulnerability exists in SIFUSM BD S1 20250611 and prior versions that stems from improper access control...

Sony XAV-AX8500 安全漏洞

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from a heap buffer overflow vulnerability that stems from an improper implementation of the Bluetooth AVCTP protocol, which can be exploited by an attacker to execute arbitrary code...

Sony XAV-AX8500 输入验证错误漏洞

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from an input validation error vulnerability that stems from an improper implementation of the Bluetooth SDP protocol resulting in an integer overflow, which can be exploited by an attacker to execute...

CVE-2025-6284

A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-6284

A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-6284 PHPGurukul Car Rental Portal cross-site request forgery

A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...