CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

AutoExpress SQL注入漏洞

AutoExpress is a car dealership application for car dealers and car buyers by Raymart DG Individual Developers. AutoExpress version v.1.3.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974

The car dealership application autoexpress v.1.3.0 contains a SQL Injection vulnerability (CWE-89). The flaw originates from the improper neutralization of special elements in the carId parameter, which allows an attacker to execute arbitrary SQL commands. This could potentially lead to unauthori...

CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

CVE-2024-30974

SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...

carid.com XSS vulnerability

Open Bug Bounty ID: OBB-669000 Description| Value ---|--- Affected Website:| carid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

carid.com XSS vulnerability

Open Bug Bounty ID: OBB-657450 Description| Value ---|--- Affected Website:| carid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17906

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

Sql injection

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

CVE-2017-17907: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17906: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

PHP Scripts Mall Car Rental Script SQL Injection Vulnerability (CNVD-2018-00484)

PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. PHP Scripts Mall Car Rental Script suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the carid parameter in admin/carlistedit.ph...

CVE-2017-17906

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

PT-2017-15091

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the carid parameter in the "admin/areaedit.php" endpoint...

PT-2017-15090

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the carid parameter in the "admin/carlistedit.php" API endpoint. This allows for potential exploitation...