Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting

Sourcecodester Car Rental Management System 1.0 is vulnerable to cross-site scripting via the vehicalorcview parameter. id: CVE-2021-46005 info: name: Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting author: cckuailong severity: medium description: Sourcecodester Car...

Car Rental Management System 1.0 - Local File Inclusion

Car Rental Management System 1.0 allows an unauthenticated user to perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, leading to code execution. id: CVE-2020-29227 info: name: Car Rental Management System 1.0 - Local File Inclusion author:...

Car Rental Management System 1.0 - SQL Injection

Car Rental Management System 1.0 contains an SQL injection vulnerability via /admin/manageuser.php?id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-32028...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...

CVE-2021-46005

CVE-2021-46005 CVE-2021-46005の詳細 ソフトウェア: Online Car Rental System 1.0 ソフトウェアリンク: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html 脆弱性タイプ: 格納型クロスサイトスクリプティング（Stored Cross Site Scripting） 影響を受けるコンポーネント: post-avehicalページのvehicalorcview サービス拒否（DoS）への影響: あり コード実行への影響...

CVE-2024-57487-and-CVE-2024-57488

オンラインカー・レンタルシステムの脆弱性 このリポジトリには、Code-Projects Online Car Rental System プロジェクト バージョン 1.0 で特定された脆弱性の詳細が含まれています。これらの脆弱性には CVE が割り当てられており、問題の理解と緩和に役立つ包括的なライトアップが含まれています。 脆弱性 1. ファイルアップロードによるリモートコード実行（認証済み） CVE-ID: CVE-2024-57487 説明: この脆弱性により、認証済みの攻撃者が悪意のある PHP ファイルをアップロードし、サーバー上でリモートコマンド実行を可能にします。...

CVE-2026-27380

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

CVE-2026-27380

CVE-2026-27380 affects the WordPress Car Rental Manager plugin

EUVD-2026-57932

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

CVE-2026-27380 WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

PT-2026-71497

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin Car Rental Manager versions = 1.3.9...

CVE-2025-67649

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

EUVD-2025-210566

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

CVE-2025-67649

CVE-2025-67649 affects PHP Jabbers – Car Rental Script. A SQL injection vulnerability arises from improper neutralization of user input in parameters used for sorting, enabling unauthenticated attackers to perform SQL Injection. The issue is fixed in version 4.1. If applying mitigations, upgrade ...

CVE-2025-67649 Unauthenticated SQL Injection in PHP Jabbers - Car Rental Script script

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

PT-2026-66747

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through = 1.3.7...

CVE-2026-61985

CVE-2026-61985 affects the WordPress Car Rental Manager plugin (

CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through = 1.3.7...