Approved changes feed: RSS · Atom

cpe:2.3:a:car_rental_script_project:car_rental_script:2.0.8:*:*:*:*:*:*:*

part: a version: 2.0.8 update: *

VendorCar Rental Script Project (6a15a8d8-f11e-567a-a3c2-b84e29d8a2f8)
ProductCar Rental Script (985795ac-478c-5c1e-a425-2918f4952dd4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6904 vulnerable 2026-06-08 05:11:54.386625 Details available
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
Published: 2018-04-12T22:00:00.000Z
Updated: 2024-08-05T06:17:16.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20648 vulnerable 2026-06-08 05:11:27.662914 Details available
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.
Published: 2019-03-20T19:26:04.000Z
Updated: 2024-08-05T12:05:17.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20647 vulnerable 2026-06-08 05:11:27.662444 Details available
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.
Published: 2019-03-20T19:23:48.000Z
Updated: 2024-08-05T12:05:17.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15182 vulnerable 2026-06-08 05:10:53.876006 Details available
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
Published: 2018-08-09T19:00:00.000Z
Updated: 2024-08-05T09:46:25.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17907 vulnerable 2026-06-08 05:09:10.080627 Details available
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.
Published: 2017-12-25T16:00:00.000Z
Updated: 2024-08-05T21:06:49.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17906 vulnerable 2026-06-08 05:09:10.080334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17905 vulnerable 2026-06-08 05:09:10.079960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.