CVE-2024-48245

CVE-2024-48245 Vehicle Management System 1.0 - 1.3 におけるSQLインジェクションの脆弱性 説明 Vehicle Management System 1.0 はSQLインジェクションに対して脆弱です。低権限のゲストユーザーまたは管理アカウントは、複数のエンドポイントの脆弱なPOSTパラメータを悪用して任意のSQLコマンドを実行できます。これにより、許可されていないデータベースアクセス、データ取得、または権限昇格が発生する可能性があります。 影響を受けるパラメータ: 予約ID アクション名 支払確認ID 影響を受けるエンドポイント:...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - 格納型クロスサイトスクリプティング XSS 説明 Vehicle Management System 1.0 には、/vehicle-management/booking.php の Name パラメータに格納型クロスサイトスクリプティング XSS の脆弱性が存在します。悪意のある攻撃者は Name フィールドに悪意のあるペイロードを注入でき、管理者が /vehicle-management/bookinglist.php...

CVE-2026-11344-RCE

PHP 製車両管理システム - newdriver.php におけるファイルアップロードを介した未認証のリモートコード実行 脆弱性情報 フィールド| 詳細 ---|--- 製品| Vehicle Management System In PHP ベンダー| code-projects.org バージョン| V1.0 脆弱性タイプ| 無制限ファイルアップロードによるリモートコード実行 CWE-434 影響を受けるファイル| newdriver.php, newvehicle.php パラメータ| photo POST, multipart/form-data 認証の必要性| なし 未認証...

CVE-2021-46071

CVE-2021-46071 漏洞标题：车辆服务管理系统 - 'Category List' 存储型跨站脚本 XSS 漏洞作者：SANU P.L CVE编号：CVE-2021-46071 CVSS评分：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46071...

CVE-2021-46072

CVE-2021-46072 漏洞标题：Vehicle Service Management System - 'Service List' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE编号：CVE-2021-46072 CVSS评分：4.8 中等 参考链接： https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46072...

CVE-2026-85517

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

EUVD-2026-71099

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85517

A sensitive information disclosure vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the file /vehicle_management.sql handled by the SQL Database Backup File Handler . An unknown function in this component allows an unauthenticated remote attacker to disclose s...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85516

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85516

A SQL injection vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the busid parameter of the file /busprofile.php. The vulnerability can be exploited remotely without authentication via manipulation of that argument. CVSS 3.1 rates it 7.3 (HIGH) with low impact...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

EUVD-2026-71097

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

PT-2026-85523

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85517: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85516: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

PT-2026-85528

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-11344

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...