Code-Projects Simple Car Rental System vulnerabilities

4 CVEs affecting Code-Projects Simple Car Rental System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-60306, published 2025-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12945, published 2024-12-26. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument…
CVE-2025-60306, published 2025-10-10. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations.
CVE-2025-8337, published 2025-07-30. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_vehicles.php. The…
CVE-2025-8335, published 2025-07-30. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is…