Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_car_rental_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Car Rental System (0acd82ef-5292-5da9-be64-6e6b649c8167)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8337 vulnerable 2026-06-08 07:45:20.010328 code-projects Simple Car Rental System add_vehicles.php cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_vehicles.php. The manipulation of the argument car_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-30T23:02:05.760Z
Updated: 2025-07-31T14:34:13.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8335 vulnerable 2026-06-08 07:45:20.009286 code-projects Simple Car Rental System cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-30T22:02:06.806Z
Updated: 2025-07-31T14:34:25.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60306 vulnerable 2026-06-08 07:37:26.852477 Details available
code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations.
Published: 2025-10-10T00:00:00.000Z
Updated: 2026-07-05T01:14:36.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12945 vulnerable 2026-06-08 06:25:36.383114 code-projects Simple Car Rental System account.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T09:31:04.287Z
Updated: 2024-12-26T16:45:59.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11632 vulnerable 2026-06-08 06:23:50.030347 code-projects Simple Car Rental System book_car.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /book_car.php. The manipulation of the argument fname/id_no/gender/email/phone/location leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "fname" to be affected. Further analysis indicates that other arguments might be affected as well.
Published: 2024-11-23T13:31:03.961Z
Updated: 2024-11-26T16:11:24.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10702 vulnerable 2026-06-08 06:23:47.310503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.