Lucene search
+L

2522 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 10:33 a.m.18 views

CVE-2024-12945

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:59 a.m.13 views

CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS7.5AI score0.00614EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:48 a.m.8 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS7.2AI score0.00908EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:44 a.m.11 views

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

9.8CVSS9.7AI score0.00807EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/30 6:15 p.m.7 views

CVE-2025-0874

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score0.00543EPSS
SaveExploits1References5
NVD
NVD
added 2025/01/30 6:15 p.m.26 views

CVE-2025-0874

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

9.8CVSS0.00543EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/30 6:00 p.m.74 views

CVE-2025-0874

Summary: CVE-2025-0874 affects code-projects Simple Plugins Car Rental Management 1.0. The vulnerability is a SQL injection in the file /admin/approve.php caused by manipulation of the id parameter. It can be triggered remotely and has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE ...

9.8CVSS6.7AI score0.00543EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/30 6:00 p.m.31 views

CVE-2025-0874 code-projects Simple Plugins Car Rental Management approve.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

6.5CVSS0.00543EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/30 12:00 a.m.21 views

PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

9.8CVSS7.2AI score0.00543EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.15 views

Code-Projects Simple Plugins Car Rental Management 注入漏洞

Code-Projects Simple Plugins Car Rental Management is an open source car rental management plugin for Code-Projects. An injection vulnerability exists in Code-Projects Simple Plugins Car Rental Management version 1.0, which stems from the manipulation of the parameter id that can lead to SQL...

9.8CVSS7.1AI score0.00543EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/01/27 12:00 a.m.19 views

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

0.00321EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:00 a.m.20 views

PT-2025-3365 · Unknown · Guazi Used Car

Name of the Vulnerable Software and Affected Versions: Guazi Used Car iOS version 10.15.1 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. This enables unauthorized access to confidential user data. Recommendations: For Guazi Used Car iOS...

6.5CVSS6.5AI score0.00321EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/27 12:00 a.m.7 views

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

6AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/27 12:00 a.m.9 views

Guazi Used Car 安全漏洞

Guazi Used Car 瓜子二手车 is a used car software from the Chinese company Guazi 瓜子. A security vulnerability exists in Guazi Used Car iOS version 10.15.1, which originates from an attacker being able to obtain sensitive user information by providing a carefully crafted link...

6.5CVSS6.1AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/27 12:00 a.m.59 views

CVE-2024-56964

CVE-2024-56964 affects Guazi Used Car iOS 10.15.1. The connected sources indicate that an attacker can access sensitive user information by supplying a crafted link, implying a vulnerability in how links trigger data exposure. The base CVSS metrics in the Initial document show a Medium severity (...

6.5CVSS6.2AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/23 4:15 p.m.13 views

CVE-2025-23636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

7.1CVSS0.00255EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/01/23 4:15 p.m.16 views

CVE-2025-23636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/23 3:29 p.m.8 views

CVE-2025-23636 WordPress My Favorite Car plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/23 3:29 p.m.29 views

CVE-2025-23636 WordPress My Favorite Car plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

7.1CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/23 3:29 p.m.63 views

CVE-2025-23636

CVE-2025-23636 is a reflected XSS vulnerability reported for the WordPress plugin “My Favorite Car” by Dimitar Atanasov. The description states an improper neutralization of input during web page generation, enabling reflected Cross-Site Scripting. Affected range is “My Favorite Car: from n/a thr...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder