Lucene search
+L

2516 matches found

OSV
OSV
added 2025/05/09 4:16 a.m.10 views

CVE-2025-4456

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

9.8CVSS5.8AI score0.00917EPSS
SaveExploits1References4
CVE
CVE
added 2025/05/09 3:00 a.m.68 views

CVE-2025-4457

CVE-2025-4457 affects Project Worlds Car Rental Project 1.0. The vulnerability resides in the file /admin/approve.php , where manipulating the ID parameter leads to an SQL injection. The issue can be exploited remotely, and the exploit has been publicly disclosed. Public documents consistently de...

9.8CVSS7.6AI score0.00917EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/09 3:00 a.m.9 views

CVE-2025-4457 Project Worlds Car Rental Project approve.php sql injection

A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00917EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/05/09 3:00 a.m.12 views

CVE-2025-4456 Project Worlds Car Rental Project signup.php sql injection

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

7.5CVSS7.6AI score0.00917EPSS
SaveExploits1References4
CVE
CVE
added 2025/05/09 3:00 a.m.56 views

CVE-2025-4456

CVE-2025-4456 affects Project Worlds Car Rental Project 1.0, where the vulnerability lies in an unknown function of the file /signup.php. Manipulating the fname parameter enables SQL injection and, per sources, can be exploited remotely with other parameters potentially affected. Public disclosur...

9.8CVSS7.6AI score0.00917EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/05/09 3:00 a.m.27 views

CVE-2025-4456 Project Worlds Car Rental Project signup.php sql injection

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

7.5CVSS0.00917EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.7 views

PT-2025-20459 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical vulnerability has been found in the Project Worlds Car Rental Project. The issue affects an unknown function of the file /signup.php. The manipulation of the fname argument...

9.8CVSS7.5AI score0.00917EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.9 views

PT-2025-20460 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the ID argument leads to SQL injection. This issue c...

9.8CVSS7.5AI score0.00917EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.8 views

Projectworlds Car Rental Project 注入漏洞

Projectworlds Car Rental Project is a car rental project by Projectworlds India. An injection vulnerability exists in Projectworlds Car Rental Project version 1.0, which stems from improper handling of the ID parameter in the /admin/approve.php file, which could lead to an SQL injection attack...

9.8CVSS7.8AI score0.00917EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/04/17 3:06 a.m.22 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS7.4AI score0.00269EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2025/04/16 12:00 a.m.306 views

Car Rental Project 1.0 - Remote Code Execution

Exploit Title: Car Rental Project 1.0 - Remote Code Execution Date: 1/3/2020 Exploit Author: FULLSHADE, SC Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: 1.0 Tested on: Windows CVE : CVE-2020-5509...

7.2CVSS7.5AI score0.05808EPSS
SaveExploits4
NVD
NVD
added 2025/04/15 4:16 p.m.29 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS0.00269EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/15 12:00 a.m.24 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

0.00269EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/15 12:00 a.m.9 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

7.6AI score0.00269EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/15 12:00 a.m.8 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS7.3AI score
SaveExploits0References3
CVE
CVE
added 2025/04/15 12:00 a.m.73 views

CVE-2025-28198

Hitout car sale 1.0 is affected by a SQL injection in the StoreController.java component, exploitable via the orderBy parameter. This issue can lead to disclosure of sensitive information. Documented details consistently identify the affected software/version and the vulnerable parameter/file but...

5.9CVSS7AI score0.00269EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/10 9:47 a.m.19 views

CVE-2025-3437

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajaxactions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticate...

4.3CVSS6.8AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.8 views

WordPress plugin Motors – Car Dealership & Classified Listings Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

5.4CVSS6AI score0.00216EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.16 views

PT-2025-15637

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020 affected versions not specified Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to insufficient boundary...

8.8CVSS6.8AI score0.00379EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.11 views

WordPress plugin Motors – Car Dealership & Classified Listings Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS9.1AI score0.00836EPSS
SaveExploits1References4
Rows per page
Query Builder