2896 matches found
CVE-2025-6284 PHPGurukul Car Rental Portal cross-site request forgery
A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2025-26248 · Unknown · Phpgurukul Car Rental Portal
Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Portal version 3.0 Description: The issue affects unknown code and leads to cross-site request forgery. The attack can be initiated remotely. Recommendations: For PHPGurukul Car Rental Portal version 3.0, consider...
PHPGurukul Car Rental Portal 安全漏洞
Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. The vulnerability can be exploited by an attacker to spoof a...
CVE-2025-6284: Cross-Site Request Forgery (CSRF)
A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
A week with a "smart" car
Welcome to this week's edition of the Threat Source newsletter. June 9 was Whit Monday -- a bank holiday here in Germany -- so I decided to take the whole week off. It turned out to be the perfect opportunity to try out a brand new car. Little did I know, I was about to get a crash course in mode...
CVE-2025-30997
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
CVE-2025-30997
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
CVE-2025-30997 WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
CVE-2025-30997
CVE-2025-30997 describes a Server-Side Request Forgery (SSRF) in the WordPress theme “Car Repair Services” by SmartDataSoft. Public details in connected sources confirm affected software: Car Repair Services WordPress Theme (including versions up to 5.0; “n/a through 5.0” in initial record). The ...
CVE-2025-30997 WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
WordPress plugin Car Repair Services 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...
CVE-2025-30997: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
PT-2025-24193 · Smartdatasoft · Smartdatasoft Car Repair Services
Name of the Vulnerable Software and Affected Versions: SmartDataSoft Car Repair Services versions n/a through 5.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 5.0,...
70mai A510 安全漏洞
70mai 70mai A510 is a car recorder from the Chinese company 70mai. A security vulnerability exists in 70mai A510, which stems from the default password configuration and could lead to authentication bypass...
WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by Bonds in WordPress Theme Car Repair Services versions = 5.0...
WordPress Car Repair Services Theme <= 5.0 is vulnerable to Server Side Request Forgery (SSRF)
Software Car Repair Services Type Theme Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2025-30997 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ac927e58431a Credits Bonds Required privilege...
CVE-2025-4691: Authorization Bypass Through User-Controlled Key
The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'viewrequestdetails' due to missing validation on a user controlled key. This makes it...
CVE-2025-39480
Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer cardealer allows Object Injection.This issue affects Car Dealer: from n/a through 1.6.8...