Advisories · Technology
e4jvikwp VikRentCar Car Rental Management System.
Every CVE that names e4jvikwp VikRentCar Car Rental Management System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter
- e4jvikwp VikRentCar Car Rental Management System
- Cross-site scripting (XSS)
- CVSS 7.2 High
VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter
- e4jvikwp VikRentCar Car Rental Management System
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute
- e4jvikwp VikRentCar Car Rental Management System
- SQL injection
- CVSS 6.4 Medium
VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute
- e4jvikwp VikRentCar Car Rental Management System
- Cross-site scripting (XSS)
- CVSS 8.8 High
VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
- e4jvikwp VikRentCar Car Rental Management System
- Cross-site request forgery (CSRF)
- CVSS 7.5 High
VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter
- e4jvikwp VikRentCar Car Rental Management System
- SQL injection
- CVSS 7.2 High
VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload
- e4jvikwp VikRentCar Car Rental Management System
- Unrestricted file upload
- CVSS 8.8 High
VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
- e4jvikwp VikRentCar Car Rental Management System
- Cross-site request forgery (CSRF)