Lucene search
+L

2531 matches found

CNNVD
CNNVD
added 2026/04/06 12:0 a.m.12 views

Car Rental System SQL注入漏洞

Car Rental System is a car rental system developed by AMEY THAKUR, an individual developer in India. Version 1.0 of Car Rental System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Message” in the file /messageadmin.php, which may lead to SQ...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.8 views

Projectworlds Car Rental Project SQL注入漏洞

Projectworlds Car Rental Project is a car rental project of the Indian company Projectworlds. Version 1.0 of the Projectworlds Car Rental Project has a SQL injection vulnerability, which arises from improper handling of the parameter fname in the file/bookcar.php, potentially leading to SQL...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.5 views

PT-2026-30579

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.11 views

Car Rental System SQL注入漏洞

Car Rental System is a car rental system developed by AMEY THAKUR, an individual developer in India. Version 1.0 of Car Rental System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the mpesa parameter in the pay.php file, which may lead to SQL injection...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.8 views

PT-2026-30595

Name of the Vulnerable Software and Affected Versions projectworlds Car Rental System version 1.0 Description A weakness exists in projectworlds Car Rental System 1.0. The issue affects an unknown functionality within the /pay.php file of the Parameter Handler component. Manipulation of the mpesa...

7.5CVSS7.4AI score0.00274EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.13 views

PT-2026-30583

A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/03 11:2 p.m.5 views

CVE-2026-5368

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

9.8CVSS6.8AI score0.00333EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/02 6:31 p.m.8 views

EUVD-2026-18482

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00333EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/02 6:16 p.m.12 views

CVE-2026-5368

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

9.8CVSS0.00333EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/02 5:15 p.m.2 views

CVE-2026-5368

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00333EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/04/02 5:15 p.m.27 views

CVE-2026-5368 projectworlds Car Rental Project Parameter login.php sql injection

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS0.00333EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/04/02 5:15 p.m.2 views

CVE-2026-5368 projectworlds Car Rental Project Parameter login.php sql injection

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00333EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/02 5:15 p.m.17 views

CVE-2026-5368

CVE-2026-5368 affects projectworlds Car Rental Project 1.0. The vulnerable element is an unknown function in the file /login.php of the Parameter Handler; manipulating the uname argument enables an SQL injection. Exploitation is remote and has been publicly disclosed. Multiple sources (NVD, Red H...

9.8CVSS6.8AI score0.00333EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.13 views

PT-2026-29859

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00333EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.10 views

Projectworlds Car Rental Project SQL注入漏洞

Projectworlds Car Rental Project is a car rental project of the Indian company Projectworlds. Version 1.0 of the Projectworlds Car Rental Project has a SQL injection vulnerability. This vulnerability stems from incorrect operations with the parameter uname in the Parameter Handler component of th...

9.8CVSS7.2AI score0.00333EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/03/26 5:1 p.m.6 views

CVE-2026-24391

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeMakers Car Dealer cardealer allows Reflected XSS.This issue affects Car Dealer: from n/a through = 1.6.7...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.7 views

EUVD-2026-15575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeMakers Car Dealer cardealer allows Reflected XSS.This issue affects Car Dealer: from n/a through = 1.6.7...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.9 views

CVE-2026-24391

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeMakers Car Dealer cardealer allows Reflected XSS.This issue affects Car Dealer: from n/a through = 1.6.7...

7.1CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.15 views

CVE-2026-24391

The connected document identifies a concrete vulnerability: WordPress Car Dealer theme versions ≤ 1.6.7 suffers a reflected Cross-Site Scripting (XSS) vulnerability. The issue is caused by input that is reflected back to the user without proper sanitization, enabling an attacker to run arbitrary ...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.27 views

CVE-2026-24391 WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeMakers Car Dealer cardealer allows Reflected XSS.This issue affects Car Dealer: from n/a through = 1.6.7...

7.1CVSS0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder