Vulnerabilities (CVE)

Filtered by vendor Phpjabbers Subscribe
Filtered by product Car Rental Script
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48835 1 Phpjabbers 1 Car Rental Script 2023-12-09 N/A 8.8 HIGH
Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
CVE-2023-48834 1 Phpjabbers 1 Car Rental Script 2023-12-09 N/A 7.5 HIGH
A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.
CVE-2023-40754 1 Phpjabbers 1 Car Rental Script 2023-08-29 N/A 8.8 HIGH
In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.