Lucene search
+L

2522 matches found

CNNVD
CNNVD
added 2025/07/30 12:00 a.m.11 views

code-projects Simple Car Rental System 安全漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in code-projects Simple Car Rental System version 1.0, which stems from vulnerability to cross-site request forgery attacks...

5.3CVSS4.9AI score0.00221EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/07/30 12:00 a.m.15 views

PT-2025-31451 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue exists in Simple Car Rental System that allows for cross-site request forgery. This issue can be initiated remotely, and the exploit has been publicly disclosed...

5.3CVSS4.4AI score0.00221EPSS
SaveExploits1References9
CNVD
CNVD
added 2025/07/30 12:00 a.m.13 views

Car Rental Project Session Hijacking Vulnerability

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/07/30 12:00 a.m.18 views

PT-2025-31453 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue has been found in the processing of the /admin/add vehicles.php file. Manipulation of the car name argument can lead to cross site scripting. The attack can be initiated...

5.4CVSS3.7AI score0.00237EPSS
SaveExploits1References9
NVD
NVD
added 2025/07/28 8:17 p.m.13 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS0.00322EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/28 8:17 p.m.13 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00322EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/28 5:15 p.m.8 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00387EPSS
SaveExploits1References3
CVE
CVE
added 2025/07/28 12:00 a.m.35 views

CVE-2025-50494

CVE-2025-50494 affects PHPGurukul Car Washing Management System v1.0, specifically the /doctor/change-password.php component. The root cause is improper session invalidation, enabling potential session hijacking. Multiple connected sources corroborate this description and identify the vulnerable ...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.8 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00387EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.5 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

6.8AI score0.00322EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.17 views

PT-2025-31148 · Unknown · Phpgurukul Car Rental Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 3.0 Description: Improper session invalidation in the /carrental/update-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation iss...

7.1CVSS6.7AI score0.00322EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS6AI score0.00322EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.24 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

0.00322EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.9 views

PHPGurukul Car Rental Project 安全漏洞

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Car Washing Management System 安全漏洞

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.19 views

CVE-2025-50494

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...

0.00387EPSS
SaveExploits1References1
CVE
CVE
added 2025/07/28 12:00 a.m.34 views

CVE-2025-50486

CVE-2025-50486 affects PHPGurukul Car Rental Project, version 3.0. The vulnerability is due to improper session invalidation in the /carrental/update-password.php component, enabling session hijacking. Documented impact indicates potential control of a user session with high confidentiality impac...

7.1CVSS6.8AI score0.00322EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2025/07/21 12:00 a.m.24 views

Car Washing Management System SQL Injection Vulnerability

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter wpid in the file /admin/editcar-washpoint.php. An attacker can...

7.2CVSS5.9AI score0.00468EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/14 2:45 p.m.14 views

CVE-2025-7476

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

9.8CVSS7.9AI score0.00448EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/14 2:45 p.m.15 views

CVE-2025-7477

A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. Th...

7.2CVSS7.2AI score0.00404EPSS
SaveExploits1References1
Rows per page
Query Builder