CVE-2017-17906

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall Car Rental Script is vulnerable to SQL Injection via the carid parameter in admin/carlistedit.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or data manipulation.

It is recommended to update the script to the latest version and implement appropriate security measures, such as input validation.

Original NVD description (English source)

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.