CVE-2017-17905

High

Published: 27/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall Car Rental Script has a CSRF vulnerability via admin/sitesettings.php.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in administrator, potentially leading to serious security breaches.

Recommendation

It is recommended to implement CSRF tokens in forms and update the script to the latest version to mitigate the risk.

Other vulnerabilities in PHP Scripts Mall Car Rental Script

CVE-2017-17906Critical
PHP Scripts Mall Car Rental Script is vulnerable to SQL Injection via the carid parameter in admin/carlistedit.php.

Original NVD description (English source)

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.