CVE-2025-3204

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3204

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3204

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3204 CodeAstro Car Rental System returncar.php sql injection

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3204 CodeAstro Car Rental System returncar.php sql injection

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3204

The CVE-2025-3204 entry concerns CodeAstro Car Rental System 1.0, where the /returncar.php file’s ID parameter can be manipulated to perform SQL injection. The vulnerability allows remote exploitation and is classified as critical, with multiple sources confirming the issue and its potential impa...

PT-2025-14831 · Unknown · Codeastro Car Rental System

Name of the Vulnerable Software and Affected Versions: CodeAstro Car Rental System version 1.0 Description: A critical issue has been found in the CodeAstro Car Rental System, affecting some unknown functionality of the file /returncar.php. The manipulation of the ID argument leads to SQL...

CodeAstro Car Rental System 安全漏洞

CodeAstro Car Rental System is a car rental system from CodeAstro. A security vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter ID that can lead to SQL injection...

CVE-2024-13737

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motorscreatetemplate and motorsdeletetemplate functions in all versions up to, and including, 1.4.57. This makes it possible for...

CVE-2025-30107

On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5, which stems from the device pairing mechanism relying only on MAC address authentication, which allows an attacker to bypass authentication through MAC address spoofing...

IROAD V Series 安全漏洞

IROAD V Series is a series of car recorders from IROAD. The IROAD V Series suffers from a security vulnerability that stems from the use of hard-coded default credentials in the car recorder, which allows an attacker to connect to the device's network within Wi-Fi range to sniff it...

IROAD V Series 安全漏洞

IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from the use of an unregistered public domain name as an internal domain name, which could lead to data exfiltration or man-in-the-middle attacks...

ROADCAM X3 安全漏洞

ROADCAM X3 is a car recorder with HD quality and easy to carry by ROADCAM. It is used to record the driving process and supports video cropping and sharing. ROADCAM X3 suffers from a security vulnerability that stems from the use of a uniform default set of credentials that cannot be modified by...

IROAD X5 访问控制错误漏洞

IROAD X5 is a car recorder from IROAD. IROAD X5 suffers from an Access Control Error vulnerability that stems from an authentication error and could lead to a remote attack...

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 that stems from improper authorization and could lead to a remote attack...

IROAD FX2 安全漏洞

IROAD FX2 is a car recorder from IROAD. A security vulnerability exists in IROAD FX2 20250308 and prior versions that stems from the use of a default password that requires an attack to be initiated on the local network...

IROAD X5 访问控制错误漏洞

IROAD X5 is a car recorder from IROAD. IROAD X5 suffers from an access control error vulnerability that stems from a lack of authentication and could lead to a remote attack...

IROAD FX2 访问控制错误漏洞

IROAD FX2 is a car recorder from IROAD. An access control error vulnerability exists in IROAD FX2 20250308 and prior versions, which stems from an information disclosure that requires an attack to be launched on the local network...

CVE-2025-2122

A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack can only be initiated within the local...