CVE-2024-57487: Code-Projects Online Car Rental System

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server.

Affected products

• Code-Projects Online Car Rental System: version 1.0 only

Published 2025-01-13. Last modified 2026-06-17.