Vulnerabilities
8 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2018-20648 +1 in the same advisory: …20647 | PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php. PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php. NVD description · AI analysis pending | 8.8 group max | <1% | PoC |
| — | |
| CVE-2018-15182 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — | |
| CVE-2018-6904 | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — | |
| CVE-2017-17906 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. NVD description · AI analysis pending | 9.8 group max | 1% | PoC |
| — | |
| CVE-2017-17637 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. NVD description · AI analysis pending | 9.8 | 2% | PoC ×2 |
| — |