2 matches found
CVE-2026-101109: Improper Neutralization of Input During Web Page Generation
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free 6.5.8 - The public vehicle-detail page task=view echoes the title request parameter directly into a double-quoted HTML attribute with no output encoding of any kind. A double-quote character in the parameter...
5.3CVSS6AI score0.00262EPSS
SaveExploits0References2
PHPGurukul Vehicle Parking Management System 安全漏洞
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid in file /admin/view-outgoingvehicle-detail.php...
8.8CVSS8.2AI score0.00369EPSS
SaveExploits1References2
20