CVE-2020-23832

概要

参考情報

• projectworlds32/Car-Rental-Syatem-PHP-MYSQL · Third Party Advisory
• packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.html · Exploit
• projectworlds.in · Vendor Advisory

car rental management system のその他の脆弱性

• CVE-2022-32019緊急 9.8Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=save_car.
• CVE-2022-32028高 7.2Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=.
• CVE-2022-32027高 7.2Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=manage_car&id=.
• CVE-2022-32026高 7.2Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.
• CVE-2022-32025高 7.2Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.