CVE-2024-57487-and-CVE-2024-57488

온라인 자동차 렌탈 시스템 취약점 이 저장소는 Code-Projects 온라인 자동차 렌탈 시스템 프로젝트 버전 1.0에서 식별된 취약점에 대한 세부 정보를 포함합니다. 해당 취약점에는 CVE가 할당되었으며, 문제를 이해하고 완화하는 데 도움이 되는 포괄적인 분석 자료가 포함되어 있습니다. 취약점 1. 파일 업로드를 통한 원격 코드 실행 인증 필요 CVE-ID: CVE-2024-57487 설명: 이 취약점은 인증된 공격자가 악성 PHP 파일을 업로드하여 서버에서 원격 명령 실행을 가능하게 합니다. 전체 분석 자료 보기 2...

Vehicle Record Management System: Edit-vehicle.php Component Cross-site Scripting Vulnerability

The Vehicle Record Management System is a vehicle record management system developed by PHPGurukul. The Vehicle Record Management System has a cross-site scripting vulnerability. This vulnerability stems from the lack of effective filtering and escaping of data provided by the...

Vehicle Record Management System search-vehicle.php component cross-site scripting vulnerability

The Vehicle Record Management System is a vehicle record management system developed by PHPGurukul. The Vehicle Record Management System has a cross-site scripting vulnerability. This vulnerability stems from the Search parameter in the admin/search-vehicle.php component, which lacks effective...

CVE-2024-51224: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the vehiclename, modelnumber, regnumber, vehiclesubtype,...

CVE-2024-51226: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Search parameter...

EUVD-2021-24286

Malware in sbrugna...

CVE-2025-7489: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. Th...

PHPGurukul Vehicle Parking Management System 安全漏洞

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in file /admin/search-vehicle.php. An attacke...

CVE-2025-5913: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated...

CVE-2024-3369

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

CVE-2024-42568

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

CVE-2025-44182: Improper Neutralization of Input During Web Page Generation

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code...

CVE-2024-57488: Improper Neutralization of Input During Web Page Generation

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

CVE-2024-10331 PHPGurukul Vehicle Record System search-vehicle.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotel...

CVE-2024-10331: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotel...

CVE-2024-42568

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

CVE-2024-42568

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

CVE-2024-42568: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

PT-2024-30028 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System, specifically via the transport parameter at the "vehicle.php" endpoint. This allows for potential...