2522 matches found
SQL Injection Vulnerability in Online Car Rental Service System
Online car rental service system is an O2O service platform built based on car rental business scenarios. There is a SQL injection vulnerability in the Online Car Rental Service System, which can be exploited by attackers to obtain sensitive information from the database...
Records with data on 129 million Russian car owners sold on dark web
By Sudais Asif Sensitive data of 129 million car owners located for sale on the dark web. This is a post from HackRead.com Read the original post: Records with data on 129 million Russian car owners sold on dark web...
DaQuanZhouAuto.com PHP website program suffers from SQL injection vulnerability.
DaQuanZhouCar.com PHP whole site program is a used car publishing website developed by PHP+MySQL. DaQuanZhouAuto.com PHP whole site program has SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
Project Worlds Official Car Rental System Code Issue Vulnerability
Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A code issue exists in the upload section of the file manager page in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to run commands on the server via the addcars.php fil...
Project Worlds Official Car Rental System SQL Injection Vulnerability
Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A SQL injection vulnerability exists in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to dump a MySQL database and bypass the login authentication pop-up window...
CVE-2020-11544
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions f...
CVE-2020-11545
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
Design/Logic Flaw
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions f...
Sql injection
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
CVE-2020-11544
Project Worlds Official Car Rental System 1 contains an arbitrary file upload vulnerability in the file-manager upload section (add_cars.php). There are no restrictions on executable file uploads, allowing an admin to run commands on the server with their account. The connected reports confirm th...
CVE-2020-11545
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
An unauthenticated user can inject malicious JavaScript via the booking form, specifically in the new user details. The XSS payload is then executed when an authenticated administrator user views the booking on the booking-list and cust-lookup pages. Inject XSS via most fields in the booking form...
WordPress Car Rental System premium plugin <= 1.3 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by ThelastVvV in WordPress Car Rental System premium plugin versions = 1.3. Solution No patched version is available. Deactivate and delete...
Car Rental System 2.6 Cross Site Scripting
Exploit Title: Car Rental System 2.6 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/car-rental-system/2734072?srank=5 Version: 2.6 Tested on: 5.4.0-kali4-amd64 ---------------------------------------------------------...
car-it.com Cross Site Scripting vulnerability OBB-1130842
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unspecified vulnerability in WordPress motors-car-dealership-classified-listings
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the includes/options.php file in WordPress...
WordPress motors-car-dealership-classified-listings cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the includes/options.php file in WordPress...
CVE-2019-17229
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress has multiple stored XSS issues...
