https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-0537.htmlhttps://patchthecve.com/cve/CVE-2025-0537.htmlWed, 17 Jun 2026 08:26:40 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be initiatehttps://patchthecve.com/cve/CVE-2024-57488.htmlhttps://patchthecve.com/cve/CVE-2024-57488.htmlWed, 17 Jun 2026 08:13:37 +0000MEDIUM 6.5: Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php.https://patchthecve.com/cve/CVE-2024-57487.htmlhttps://patchthecve.com/cve/CVE-2024-57487.htmlWed, 17 Jun 2026 08:13:37 +0000MEDIUM 6.5: In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server.https://patchthecve.com/cve/CVE-2024-12998.htmlhttps://patchthecve.com/cve/CVE-2024-12998.htmlWed, 17 Jun 2026 07:00:56 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. T