Online Car Rental System (Code-projects) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-01-13. Vendor: Code-projects.

CVEs of Online Car Rental System

• CVE-2024-57488 - CVSS 6.5 (medium), 2025-01-13: Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php.
• CVE-2024-57487 - CVSS 6.5 (medium), 2025-01-13: In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP…
• CVE-2024-12998 - CVSS 6.9 (medium), 2024-12-28: A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file…