CVE-2024-48245

CVE-2024-48245 车辆管理系统 1.0 - 1.3 中的 SQL 注入漏洞 描述 车辆管理系统 1.0 存在 SQL 注入漏洞。低权限的访客用户或管理员账户可利用多个端点中的 POST 参数执行任意 SQL 命令。这可能导致未经授权的数据库访问、数据检索或权限提升。 受影响参数： 预订 ID 操作名称 支付确认 ID 受影响端点： /vehicle-management/newvehicle.php /vehicle-management/newdriver.php 漏洞详情 类型：SQL 注入 供应商：车辆管理系统 受影响版本：1.0 攻击向量...

CVE-2026-11344-RCE

Vehicle Management System In PHP - 通过 newdriver.php 文件上传实现未认证远程代码执行 漏洞信息 字段| 详情 ---|--- 产品| Vehicle Management System In PHP 供应商| code-projects.org 版本| V1.0 漏洞类型| 未限制文件上传导致远程代码执行 CWE-434 受影响文件| newdriver.php, newvehicle.php 参数| photo POST, multipart/form-data 是否需要认证| 否（未认证） CVSS 分数| 10.0 严重 攻击向量|...

CVE-2026-11344 code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...

CVE-2026-11344

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...

EUVD-2026-34865

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...

PT-2026-47008

Name of the Vulnerable Software and Affected Versions code-projects Vehicle Management System version 1.0 Description An unrestricted file upload issue exists within the New Driver Registration Form component in the file 'newdriver.php'. A remote attacker can achieve this by manipulating the phot...

CVE-2026-11344: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely...

CVE-2024-48245: Improper Neutralization of Special Elements used in an SQL Command

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-5145 SourceCodester Vehicle Management System HTTP POST Request newdriver.php unrestricted upload

A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /newdriver.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The...

CVE-2024-5145: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /newdriver.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The...

PT-2024-34637 · Sourcecodester · Itsourcecode Vehicle Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Management System versions up to 1.0 Description: A critical issue affects the processing of the file /newdriver.php of the component HTTP POST Request Handler. The manipulation of the file argument leads to unrestricte...