car rental script project vulnerabilities

Recent CVEs affecting car rental script project products. 8 tracked.

car rental script project has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2017-17637 (score 65/100).

• CVE-2018-6904 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
• CVE-2018-20648 HIGH 8.8 DOWNGRADE PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.
• CVE-2018-20647 MEDIUM 6.5 DOWNGRADE PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an imag
• CVE-2018-15182 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
• CVE-2017-17907 MEDIUM 6.1 DOWNGRADE PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesetting
• CVE-2017-17906 CRITICAL 9.8 DOWNGRADE PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
• CVE-2017-17905 HIGH 8.8 DOWNGRADE PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
• CVE-2017-17637 CRITICAL 9.8 DOWNGRADE Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

FAQ

How do I fix car rental script project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is car rental script project being exploited right now?

None of the tracked car rental script project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which car rental script project CVE should I patch first?

CVE-2017-17637 currently ranks highest (65/100): Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter..

Products

• car rental script

RSS feed for car rental script project · ← Back to latest CVEs