2055 matches found
Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting
Sourcecodester Car Rental Management System 1.0 is vulnerable to cross-site scripting via the vehicalorcview parameter. id: CVE-2021-46005 info: name: Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting author: cckuailong severity: medium description: Sourcecodester Car...
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System 1.0 contains an SQL injection vulnerability via /admin/manageuser.php?id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-32028...
Car Rental Management System 1.0 - Local File Inclusion
Car Rental Management System 1.0 allows an unauthenticated user to perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, leading to code execution. id: CVE-2020-29227 info: name: Car Rental Management System 1.0 - Local File Inclusion author:...
CVE-2024-53345
CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...
WordPress VikRentItems Flexible Rental Management System plugin < 1.2.4 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Artus KG and Shhriyash in WordPress Plugin VikRentItems Flexible Rental Management System versions 1.2.4...
CVE-2026-4123
The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check on the togglecache function which is hooked to the wpajaxtogglecache AJAX action. The function also lacks nonce...
CVE-2026-4123
The RW Elephant Rental Inventory WordPress plugin (all versions up to and including 2.3.13 ) is vulnerable to Missing Authorization in the toggle_cache() function hooked to the wp_ajax_toggle_cache AJAX action. The function lacks both a capability check and nonce verification , allowing any authe...
CVE-2026-88926 VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks...
EUVD-2026-83508
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin versions before 1.2.4 fail to sanitise and escape certain parameters before using them in SQL statements, enabling unauthenticated SQL injection . The vulnerability was discovered by Artus KG and Shhriyash . CISA's SSVC assessmen...
CVE-2026-88926 VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing unauthenticated users to perform SQL injection attacks...
CVE-2024-6043
CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Overview This Python tool exploits the CVE-2024-6043 vulnerability, which affects the SourceCodester Best House Rental Management System 1.0. The vulnerability allows remote attackers to perform SQL Injection via the adminclass.php file,...
CVE-2021-46005
CVE-2021-46005 All Details about CVE-2021-46005 Software: Online Car Rental System 1.0 Software Link: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Vulnerability Type: Stored Cross Site Scripting Affected Component: vehicalorcview in post-avehical page Impac...
CVE-2024-57487-and-CVE-2024-57488
Vulnerabilidades del Sistema de Alquiler de Coches en Línea Este repositorio contiene detalles sobre las vulnerabilidades identificadas en el proyecto Online Car Rental System de Code-Projects, Versión 1.0. A las vulnerabilidades se les han asignado CVEs e incluyen informes completos para ayudar ...
CVE-2024-46377
CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...
CVE-2021-25790-Multiple-Stored-XSS
CVE-2021-25790-Múltiples-XSS-Almacenado: Múltiples XSS Almacenado en House Rental and Property Listing V1.0. Enlace del software: https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790...
CVE-2024-39210
ID de CVE CVE-2024-39210 PRODUCTO Best house rental management system VERSIÓN =1.0 TIPO DE PROBLEMA Control de acceso incorrecto Descripción Se descubrió que Best House Rental Management System v1.0 contiene una vulnerabilidad de lectura arbitraria de archivos a través del parámetro Page en...
VulnCheck KEV: CVE-2022-32025
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/viewcar.php?id=...