Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_car_rental_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Car Rental System (0acd82ef-5292-5da9-be64-6e6b649c8167)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8337 vulnerable 2026-06-08 07:45:20.010291 code-projects Simple Car Rental System add_vehicles.php cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_vehicles.php. The manipulation of the argument car_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-30T23:02:05.760Z
Updated: 2025-07-31T14:34:13.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8335 vulnerable 2026-06-08 07:45:20.006901 code-projects Simple Car Rental System cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-30T22:02:06.806Z
Updated: 2025-07-31T14:34:25.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7477 vulnerable 2026-06-08 07:45:17.492713 code-projects Simple Car Rental System add_cars.php unrestricted upload
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T14:32:05.913Z
Updated: 2025-07-15T13:39:56.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7476 vulnerable 2026-06-08 07:45:17.492304 code-projects Simple Car Rental System approve.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T13:32:04.987Z
Updated: 2025-07-15T13:41:07.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7475 vulnerable 2026-06-08 07:45:17.490271 code-projects Simple Car Rental System pay.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T12:32:05.947Z
Updated: 2025-07-15T13:46:25.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12945 vulnerable 2026-06-08 06:25:36.382204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11962 vulnerable 2026-06-08 06:23:50.766119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11632 vulnerable 2026-06-08 06:23:50.030387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10702 vulnerable 2026-06-08 06:23:47.311213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.