car_rental_script_project - MidnightBSD Security Advisories

CVE-2017-17637 HIGH

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.4

CVE-2017-17905 MEDIUM

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-352,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.8

CVE-2017-17906 HIGH

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.8

CVE-2017-17907 MEDIUM

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.8

CVE-2018-15182 LOW

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.8

CVE-2018-6904 LOW

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
car_rental_script_project	car_rental_script	2.0.8

Advisories for car_rental_script_project