PatchTheCVE: car portalhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-6510: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to ihttps://patchthecve.com/cve/CVE-2012-6510.htmlhttps://patchthecve.com/cve/CVE-2012-6510.htmlTue, 16 Jun 2026 23:48:15 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PWRS or (2) Description field when posting a new vehicle; (3) news title when creating news; (4) Name when creating a sub user; (5) group name CVE-2012-6509: Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbithttps://patchthecve.com/cve/CVE-2012-6509.htmlhttps://patchthecve.com/cve/CVE-2012-6509.htmlTue, 16 Jun 2026 23:48:15 +0000HIGH 7.5: Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg.CVE-2012-6508: Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackehttps://patchthecve.com/cve/CVE-2012-6508.htmlhttps://patchthecve.com/cve/CVE-2012-6508.htmlTue, 16 Jun 2026 23:48:15 +0000MEDIUM 6.8: Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; (2) create a userCVE-2010-3418: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote athttps://patchthecve.com/cve/CVE-2010-3418.htmlhttps://patchthecve.com/cve/CVE-2010-3418.htmlTue, 16 Jun 2026 23:22:43 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) car_id parameter to index.php and (2) y parameter to include/images.php.CVE-2009-0395: SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to exehttps://patchthecve.com/cve/CVE-2009-0395.htmlhttps://patchthecve.com/cve/CVE-2009-0395.htmlTue, 16 Jun 2026 23:04:57 +0000HIGH 7.5: SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.CVE-2008-5310: SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbhttps://patchthecve.com/cve/CVE-2008-5310.htmlhttps://patchthecve.com/cve/CVE-2008-5310.htmlTue, 16 Jun 2026 22:59:41 +0000HIGH 7.5: SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.