CVE-2022-32027

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=managecar&id=...

PT-2022-21054

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/car-rental-management-system/admin/index.php?page=manage car&id=" endpoint, where the id parameter is vulnerable...

CVE-2020-27956

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=managecar because .php files can be uploaded to admin/assets/uploads/ under the web root...

PT-2020-16879

Name of the Vulnerable Software and Affected Versions SourceCodester Car Rental Management System version 1.0 Description The issue allows remote code execution due to an arbitrary file upload vulnerability in the Upload Image component. This is possible because .php files can be uploaded to the...