phpscriptpoint Car Listing 1.6
Approved changes feed: RSS · Atom
cpe:2.3:a:phpscriptpoint:car_listing:1.6:*:*:*:*:*:*:*
part: a version: 1.6 update: *
| Vendor | Phpscriptpoint (a284ce08-7737-5f14-aa09-df8487f4b345) |
|---|---|
| Product | Car Listing (724db49b-2602-52e1-902b-61a9a759d69c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3859 |
vulnerable | 2026-06-08 06:09:40.709057 |
phpscriptpoint Car Listing GET Parameter search.php sql injection
MEDIUM (6.3)
A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of the component GET Parameter Handler. The manipulation of the argument brand_id/model_id/car_condition/car_category_id/body_type_id/fuel_type_id/transmission_type_id/year/mileage_start/mileage_end/country/state/city leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235211. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-07-24T02:00:04.712Z
Updated: 2024-10-15T20:07:22.178Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3858 |
vulnerable | 2026-06-08 06:09:40.708376 |
phpscriptpoint Car Listing search.php cross site scripting
LOW (3.5)
A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-07-24T01:31:03.712Z
Updated: 2025-08-21T13:53:02.684Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.