PatchTheCVE: car rental script projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-20648: PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.https://patchthecve.com/cve/CVE-2018-20648.htmlhttps://patchthecve.com/cve/CVE-2018-20648.htmlWed, 17 Jun 2026 01:53:15 +0000HIGH 8.8: PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.CVE-2018-20647: PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an imaghttps://patchthecve.com/cve/CVE-2018-20647.htmlhttps://patchthecve.com/cve/CVE-2018-20647.htmlWed, 17 Jun 2026 01:53:15 +0000MEDIUM 6.5: PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.CVE-2018-15182: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.https://patchthecve.com/cve/CVE-2018-15182.htmlhttps://patchthecve.com/cve/CVE-2018-15182.htmlWed, 17 Jun 2026 01:42:11 +0000MEDIUM 5.4: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.CVE-2018-6904: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.https://patchthecve.com/cve/CVE-2018-6904.htmlhttps://patchthecve.com/cve/CVE-2018-6904.htmlWed, 17 Jun 2026 02:02:26 +0000MEDIUM 5.4: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.CVE-2017-17907: PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettinghttps://patchthecve.com/cve/CVE-2017-17907.htmlhttps://patchthecve.com/cve/CVE-2017-17907.htmlWed, 17 Jun 2026 01:11:52 +0000MEDIUM 6.1: PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.CVE-2017-17906: PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.https://patchthecve.com/cve/CVE-2017-17906.htmlhttps://patchthecve.com/cve/CVE-2017-17906.htmlWed, 17 Jun 2026 01:11:52 +0000CRITICAL 9.8: PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.CVE-2017-17905: PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.https://patchthecve.com/cve/CVE-2017-17905.htmlhttps://patchthecve.com/cve/CVE-2017-17905.htmlWed, 17 Jun 2026 01:11:52 +0000HIGH 8.8: PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.CVE-2017-17637: Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.https://patchthecve.com/cve/CVE-2017-17637.htmlhttps://patchthecve.com/cve/CVE-2017-17637.htmlWed, 17 Jun 2026 01:11:25 +0000CRITICAL 9.8: Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.