Phpgurukul Car Rental Portal vulnerabilities

5 CVEs affecting Phpgurukul Car Rental Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6284, published 2025-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5509, published 2020-01-14. High severity, CVSS 7.2. EPSS: 5.8% chance of exploitation in the next 30 days. PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image.
CVE-2021-26809, published 2021-02-17. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
CVE-2025-4926, published 2025-05-19. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/post-avehical.php. The manipulation…
CVE-2024-10701, published 2024-11-02. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search.php. The manipulation of the argument…
CVE-2025-6284, published 2025-06-19. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The…