171 matches found
Car Rental Script 安全漏洞
Car Rental Script is a vehicle rental script from GZ Script open source. A security vulnerability exists in PHPJabbers Car Rental Script version v3.0, which stems from a user enumeration vulnerability during password reset...
CVE-2023-40764
User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40764
CVE-2023-40764 affects PHP Jabbers Car Rental Script v3.0. The issue is a user-enumeration flaw in the password-recovery flow: differences in response messages reveal whether a username exists, enabling brute-force attempts with valid users. The CVSSv3.1 base score is high (9.8, Critical) with ne...
PHPJabbers Vacation Rental Script 4.0 - CSRF Vulnerability
Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF Exploit Author: Hasan Ali YILDIR Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/vacation-rental-script/ Version: 4.0 Tested on: Windows 10 Pro Description The attacker can send to victim a link...
CVE-2023-3757
A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/showheader=T/local=3. The manipulation of the argument...
CVE-2023-3757
A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/showheader=T/local=3. The manipulation of the argument...
CVE-2023-3757 GZ Scripts Car Rental Script cross site scripting
A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/showheader=T/local=3. The manipulation of the argument...
CVE-2023-3757
GZ Scripts Car Rental Script 1.8 is affected by a cross-site scripting (XSS) vulnerability in an unknown function of /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/show_header=T/local=3. The manipulation of parameters first_name/second_name/phone/address_1...
CVE-2023-3757 GZ Scripts Car Rental Script cross site scripting
A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/showheader=T/local=3. The manipulation of the argument...
PT-2023-26028 · Unknown · Gz Scripts Car Rental Script
Name of the Vulnerable Software and Affected Versions: GZ Scripts Car Rental Script version 1.8 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file...
Car Rental Script 跨站脚本漏洞
Car Rental Script is an open source vehicle rental script from GZ Script. GZ Script Car Rental Script version 1.8 cross-site scripting vulnerability , the vulnerability stems from the parameter firstname/secondname/phone/address1/country cross-site scripting XSS vulnerability...
CVE-2023-3555
A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /preview.php. The manipulation of the argument page/layout/sortby/propertyid leads to cross site scripting. It is possible to initiate the attack...
Cross site scripting
A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /preview.php. The manipulation of the argument page/layout/sortby/propertyid leads to cross site scripting. It is possible to initiate the attack...
GZ Scripts PHP Vacation Rental Script 跨站脚本漏洞
GZ Scripts PHP Vacation Rental Script is a powerful web-based vacation rental software from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts PHP Vacation Rental Script, which stems from an unknown issue with /preview.php...
CVE-2023-3555 GZ Scripts PHP Vacation Rental Script preview.php cross site scripting
A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /preview.php. The manipulation of the argument page/layout/sortby/propertyid leads to cross site scripting. It is possible to initiate the attack...
PT-2023-25225 · Unknown · Gz Scripts Php Vacation Rental Script
Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP Vacation Rental Script version 1.8 Description: A problematic issue has been found, affecting an unknown part of the file /preview.php. The manipulation of the page, layout, sort by, and property id arguments leads to cross-sit...
CVE-2018-20648
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...
CVE-2018-20647
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...