Vulnerabilities (CVE)

Filtered by vendor Car Rental Management System Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-32026 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.
CVE-2022-32021 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_movement.php?id=.
CVE-2022-32022 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.
CVE-2022-32024 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.
CVE-2022-32025 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.
CVE-2022-32027 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=manage_car&id=.
CVE-2022-32028 1 Car Rental Management System Project 1 Car Rental Management System 2022-06-10 6.5 MEDIUM 7.2 HIGH
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=.
CVE-2022-29318 1 Car Rental Management System Project 1 Car Rental Management System 2022-05-17 6.5 MEDIUM 7.2 HIGH
An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.