17 matches found
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
CVE-2024-30974: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
AutoExpress SQL注入漏洞
AutoExpress is a car dealership application for car dealers and car buyers by Raymart DG Individual Developers. AutoExpress version v.1.3.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to run arbitrary SQL commands via the carId parameter...
CVE-2024-30974
The autoexpress car dealership application (version v.1.3.0 ) is vulnerable to a SQL Injection vulnerability. This flaw originates from the improper neutralization of special elements used in an SQL command, specifically allowing an attacker to execute arbitrary SQL commands via the carId paramet...
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter...
carid.com XSS vulnerability
Open Bug Bounty ID: OBB-669000 Description| Value ---|--- Affected Website:| carid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
carid.com XSS vulnerability
Open Bug Bounty ID: OBB-657450 Description| Value ---|--- Affected Website:| carid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-17906
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
Sql injection
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17907: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
CVE-2017-17906: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
PHP Scripts Mall Car Rental Script SQL Injection Vulnerability (CNVD-2018-00484)
PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. PHP Scripts Mall Car Rental Script suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the carid parameter in admin/carlistedit.ph...