Approved changes feed: RSS · Atom

cpe:2.3:a:fabian:simple_car_rental_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorFabian (fbf7922e-b691-5c28-8717-83ed5e15ae54)
ProductSimple Car Rental System (97e0b115-baa0-50fc-bf3c-6cb63aa38bac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7477 vulnerable 2026-06-03 15:12:31.338923 code-projects Simple Car Rental System add_cars.php unrestricted upload
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T14:32:05.913Z
Updated: 2025-07-15T13:39:56.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7476 vulnerable 2026-06-03 15:12:31.338398 code-projects Simple Car Rental System approve.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T13:32:04.987Z
Updated: 2025-07-15T13:41:07.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7475 vulnerable 2026-06-03 15:12:31.337893 code-projects Simple Car Rental System pay.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T12:32:05.947Z
Updated: 2025-07-15T13:46:25.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0874 vulnerable 2026-06-03 14:58:33.093335 code-projects Simple Plugins Car Rental Management approve.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-30T18:00:11.900Z
Updated: 2025-02-12T19:51:11.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11962 vulnerable 2026-06-03 14:54:15.221270 code-projects Simple Car Rental System login.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-28T15:31:04.849Z
Updated: 2024-11-29T15:15:49.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11632 vulnerable 2026-06-03 14:54:14.517374 code-projects Simple Car Rental System book_car.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /book_car.php. The manipulation of the argument fname/id_no/gender/email/phone/location leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "fname" to be affected. Further analysis indicates that other arguments might be affected as well.
Published: 2024-11-23T13:31:03.961Z
Updated: 2024-11-26T16:11:24.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10702 vulnerable 2026-06-03 14:54:12.380375 code-projects Simple Car Rental System signup.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-02T18:00:11.570Z
Updated: 2024-11-05T15:15:34.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.