2897 matches found
CVE-2025-4457
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...
CVE-2025-4457 Project Worlds Car Rental Project approve.php sql injection
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...
CVE-2025-4457
CVE-2025-4457 affects Project Worlds Car Rental Project 1.0. The vulnerability resides in the file /admin/approve.php , where manipulating the ID parameter leads to an SQL injection. The issue can be exploited remotely, and the exploit has been publicly disclosed. Public documents consistently de...
CVE-2025-4456 Project Worlds Car Rental Project signup.php sql injection
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...
CVE-2025-4456
CVE-2025-4456 affects Project Worlds Car Rental Project 1.0, where the vulnerability lies in an unknown function of the file /signup.php. Manipulating the fname parameter enables SQL injection and, per sources, can be exploited remotely with other parameters potentially affected. Public disclosur...
CVE-2025-4456 Project Worlds Car Rental Project signup.php sql injection
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...
CVE-2025-4457: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...
PT-2025-20460 · Unknown · Project Worlds Car Rental Project
Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the ID argument leads to SQL injection. This issue c...
PT-2025-20459 · Unknown · Project Worlds Car Rental Project
Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical vulnerability has been found in the Project Worlds Car Rental Project. The issue affects an unknown function of the file /signup.php. The manipulation of the fname argument...
CVE-2025-4456: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...
Projectworlds Car Rental Project 注入漏洞
Projectworlds Car Rental Project is a car rental project by Projectworlds India. An injection vulnerability exists in Projectworlds Car Rental Project version 1.0, which stems from improper handling of the ID parameter in the /admin/approve.php file, which could lead to an SQL injection attack...
CVE-2024-13738: Improper Control of Generation of Code
The The Motors - Car Dealer, Rental & Listing WordPress theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.6.65. This is due to the software allowing users to execute an action that does not properly validate a value before running...
CVE-2025-28198
A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...
Car Rental Project 1.0 - Remote Code Execution
Exploit Title: Car Rental Project 1.0 - Remote Code Execution Date: 1/3/2020 Exploit Author: FULLSHADE, SC Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: 1.0 Tested on: Windows CVE : CVE-2020-5509...
CVE-2025-28198
A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...
CVE-2025-28198
A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...
CVE-2025-28198: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...
CVE-2025-28198
The Hitout car sale version 1.0 is impacted by a SQL injection vulnerability in the StoreController.java component. A remote attacker can exploit the orderBy parameter to obtain sensitive information from the database. To mitigate this risk, users are advised to restrict access to the orderBy par...
