CVE-2024-11632

CVE-2024-11632 affects code-projects Simple Car Rental System 1.0. The vulnerability is in the unknown function of /book_car.php, where manipulation of parameters fname, id_no, gender, email, phone, and location leads to SQL injection. It can be exploited remotely, and the exploit has been public...

CVE-2025-0874

Summary: CVE-2025-0874 affects code-projects Simple Plugins Car Rental Management 1.0. The vulnerability is a SQL injection in the file /admin/approve.php caused by manipulation of the id parameter. It can be triggered remotely and has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE ...

CVE-2024-10702

The CVE-2024-10702 entry affects code-projects Simple Car Rental System 1.0, specifically the /signup.php file. The vulnerability arises from improper handling of the fname parameter, enabling SQL injection that can be exploited remotely. Multiple connected sources corroborate a critical severity...

CVE-2024-11962

CVE-2024-11962 affects the Code-Projects Simple Car Rental System 1.0. The vulnerability is an SQL injection in the file /login.php via the uname parameter, allowing remote exploitation without authentication. Root cause: improper handling/concatenation of user input in the login logic. Documente...

CVE-2025-7476

The CVE-2025-7476 entry concerns Code-Projects Simple Car Rental System 1.0. A SQL injection vulnerability exists in the unknown code of /admin/approve.php, triggered by manipulating the ID argument. Attacks can be performed remotely and, per multiple sources, the exploit has been disclosed publi...

CVE-2025-7477

CVE-2025-7477 affects Code-Projects Simple Car Rental System 1.0. The flaw lies in processing of the /admin/add_cars.php file, where manipulating the image argument enables unrestricted file upload. Attacks can be remote and the exploit has been publicly disclosed. Multiple connected sources corr...

CVE-2025-7475

CVE-2025-7475 affects Simple Car Rental System 1.0, with the vulnerability located in /pay.php where manipulating the mpesa parameter enables SQL injection. The issue is exploitable remotely and exploitation details have been disclosed publicly. Multiple connected sources confirm a critical impac...