Car Rental Script Security Vulnerability

Car Rental Script is a vehicle rental script of GZ Script open source . Car Rental Script v3.0 version has a security vulnerability , the vulnerability stems from name and other parameters have stored cross-site scripting XSS vulnerability...

CVE-2023-48837

CVE-2023-48837 affects PHPJabbers Car Rental Script v3.0. It is vulnerable to multiple HTML injection (XSS) via the SMS API Key and Default Country Code fields due to inadequate input sanitization. Impact is described as HTML injection; CVSS v3.1 base score 5.4 (Medium). Exploitation details are ...

CVE-2023-48836

Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

PT-2023-30979 · Unknown · Car Rental Script

Name of the Vulnerable Software and Affected Versions: Car Rental Script version 3.0 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS problems. These issues can be triggered via several parameters, including name, plugin sms api key, plugin sms country code, calendar id,...

CVE-2023-48837

Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...

Car Rental Script Security Vulnerability

Car Rental Script is an open source vehicle rental script from GZ Script. A security vulnerability exists in Car Rental v3.0, which originates from a CSV injection vulnerability in the Language Labels Export operation...

Car Rental Script Security Vulnerability

Car Rental Script is an open source vehicle rental script from GZ Script. Car Rental Script v3.0 version has a security vulnerability , the vulnerability stems from the existence of multiple HTML injection vulnerabilities...

Car Rental Script Security Vulnerability

Car Rental Script is a vehicle rental script in GZ Script open source . Car Rental Script v3.0 version has a security vulnerability , the vulnerability stems from the lack of rate limiting in pjActionAJaxSend , resulting in an attacker can exhaust system resources...

Equipment Rental Script 1.0 SQL Injection

Title: Equipment Rental Script-1.0 - SQLi Author: nu11secur1ty Date: 09/12/2023 Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/equipment-rental-script/sectionDemo Reference: https://portswigger.net/web-security/sql-injection Description: The packageid parameter appears t...

CVE-2023-40764

User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40764

User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40764

User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40754

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

CVE-2023-40754

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

Default credentials

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

CVE-2023-40754

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

PT-2023-27629 · Phpjabbers · Phpjabbers Car Rental Script

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Car Rental Script version 3.0 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40754

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

Car Rental Script 安全漏洞

Car Rental Script is an open source vehicle rental script by GZ Script. A security vulnerability exists in PHPJabbers Car Rental Script version 3.0, which stems from a lack of validation when changing e-mail addresses or passwords...

CVE-2023-40754

CVE-2023-40754 affects PHPJabbers Car Rental Script 3.0. The issue is a lack of verification when changing the email address and/or password on the Profile Page, allowing remote attackers to take over accounts. Exploitation details are not provided in the sources, and no official fix/version is s...