Code-Projects Simple Car Rental System security vulnerabilities

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from a privilege bypass issue that allows a low-privileged user to spoof an elevated privilege sessio...

CVE-2014-8684

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object injection attacks by leveraging use of standard string comparison operators to compare cryptographic hashes...