PatchTheCVE: rental bike script projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-7434: PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uplhttps://patchthecve.com/cve/CVE-2019-7434.htmlhttps://patchthecve.com/cve/CVE-2019-7434.htmlWed, 17 Jun 2026 02:40:37 +0000MEDIUM 6.5: PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.CVE-2019-7433: PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.https://patchthecve.com/cve/CVE-2019-7433.htmlhttps://patchthecve.com/cve/CVE-2019-7433.htmlWed, 17 Jun 2026 02:40:36 +0000HIGH 8.8: PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.CVE-2019-7432: PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.https://patchthecve.com/cve/CVE-2019-7432.htmlhttps://patchthecve.com/cve/CVE-2019-7432.htmlWed, 17 Jun 2026 02:40:36 +0000MEDIUM 5.4: PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.