Projectworlds Official Car Rental System vulnerabilities

2 CVEs affecting Projectworlds Official Car Rental System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11545, published 2020-04-06.

More from Projectworlds.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-11545, published 2020-04-06. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname and pass parameters (login.php), and id…
• CVE-2020-11544, published 2020-04-06. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page…