Lucene search
+L

2522 matches found

OSV
OSV
added 2024/11/28 4:15 p.m.8 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS5.8AI score0.00862EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/28 4:15 p.m.22 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS0.00862EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/28 3:31 p.m.17 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00862EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/28 3:31 p.m.39 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS0.00862EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/28 3:31 p.m.60 views

CVE-2024-11962

CVE-2024-11962 affects the Code-Projects Simple Car Rental System 1.0. The vulnerability is an SQL injection in the file /login.php via the uname parameter, allowing remote exploitation without authentication. Root cause: improper handling/concatenation of user input in the login logic. Documente...

9.8CVSS7.5AI score0.00862EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.9 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is a Code-Projects open source car rental software. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter uname in the file /login.php that causes SQL injection...

9.8CVSS8AI score0.00862EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/28 12:00 a.m.14 views

PT-2024-17365 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been found in the Simple Car Rental System, affecting an unknown functionality of the file /login.php. The manipulation of the uname argument leads to SQL injection. This...

9.8CVSS8.1AI score0.00862EPSS
SaveExploits1References9
OSV
OSV
added 2024/11/23 2:15 p.m.10 views

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

9.8CVSS5.7AI score0.00807EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/23 2:15 p.m.17 views

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

9.8CVSS0.00807EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/23 1:31 p.m.71 views

CVE-2024-11632

CVE-2024-11632 affects code-projects Simple Car Rental System 1.0. The vulnerability is in the unknown function of /book_car.php, where manipulation of parameters fname, id_no, gender, email, phone, and location leads to SQL injection. It can be exploited remotely, and the exploit has been public...

9.8CVSS7.7AI score0.00807EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/23 1:31 p.m.15 views

CVE-2024-11632 code-projects Simple Car Rental System book_car.php sql injection

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

7.5CVSS7.3AI score0.00807EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.14 views

PT-2024-17147 · Unknown · Code-Projects Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Car Rental System version 1.0 Description: A critical issue has been found in the code-projects Simple Car Rental System. The problem is related to an unknown function of the file /book car.php, where the manipulation of...

9.8CVSS7.8AI score0.00807EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/23 12:00 a.m.11 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...

9.8CVSS7.9AI score0.00807EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/20 11:15 a.m.22 views

CVE-2024-10382

There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to...

7.5CVSS0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/20 11:15 a.m.7 views

CVE-2024-10382

There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to...

7.3CVSS6.2AI score0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/20 10:21 a.m.23 views

CVE-2024-10382 Arbitrary Code execution in Car App Android Jetpack Library

There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to...

7.3CVSS7.6AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/20 10:21 a.m.65 views

CVE-2024-10382

CVE-2024-10382 affects the Car App Android Jetpack Library, with vulnerable component in CarAppService deserialization logic that can construct arbitrary Java classes and enable arbitrary code execution when combined with certain deserialization gadgets. Affected versions are earlier than 1.7.0-b...

7.5CVSS7.6AI score0.00154EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.19 views

PT-2024-16235 · Google · Car App Android Jetpack Library

Name of the Vulnerable Software and Affected Versions: Car App Android Jetpack Library versions prior to 1.7.0-beta02 Description: The issue is related to a code execution vulnerability in the Car App Android Jetpack Library. Specifically, the CarAppService uses deserialization logic that allows...

7.5CVSS7.1AI score0.00154EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.9 views

Google Car App 安全漏洞

Google Car App is a library of cycling applications from Google Inc USA. A security vulnerability exists in Google Car App that stems from the presence of a code execution vulnerability that could lead to arbitrary code execution...

7.5CVSS7.9AI score0.00154EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/07 12:00 a.m.12 views

Car Rental Portal /search.php file cross-site scripting vulnerability

Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search.php file parameter searchdata, which can be exploited by an attacker to execute arbitrary...

6.1CVSS4.5AI score0.00429EPSS
SaveExploits1References1
Rows per page
Query Builder