CVE-2020-5509

CVE-2020-5509 affects PHPGurukul Car Rental Project v1.0. It allows Remote Code Execution via an executable file uploaded as a new profile image, due to improper validation of uploaded files. Exploit details are described in Exploit-DB and PacketStorm reports, and PT-2020-18486 recommends restric...

CVE-2024-10701

The CVE-2024-10701 entry affects PHPGurukul Car Rental Portal 1.0. The vulnerability occurs in the /search.php handler via the searchdata parameter, enabling cross-site scripting. It can be triggered remotely, and public exploitation is indicated. Connected documents corroborate the issue with XS...

CVE-2021-26809

CVE-2021-26809 affects PHPGurukul Car Rental Project version 2.0. The vulnerability is a remote shell upload in changeimage1.php, enabling an attacker to upload arbitrary code and potentially take control of the system. Practical impact is remote code execution with high severity. Remediation/mit...

CVE-2025-4926

CVE-2025-4926 affects the PHPGurukul Car Rental Project 1.0, with a vulnerability in the admin/post-avehical.php file. The issue arises from manipulation of the arguments img1, img2, img3, img4, or img5, leading to unrestricted (remote) file upload. Multiple sources indicate this could be exploit...

CVE-2025-6284

The CVE-2025-6284 entry concerns PHPGurukul Car Rental Portal 3.0, where a Cross-Site Request Forgery (CSRF) vulnerability affects unknown code. Public disclosures indicate the attack can be initiated remotely and that exploitation is possible with user interaction, depending on the vector detail...