Car Rental Script vulnerabilities

2 known vulnerabilities in Car Rental Script from Phpjabbers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Car Rental Script: Generation of Error Message Containing Sensitive Information

  CVE-2023-40764Aug 28, 2023Phpjabbers

  User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.

• 8.8 High severity

  Car Rental Script: Incorrect Permission Assignment for Critical Resource

  CVE-2023-40754Aug 28, 2023Phpjabbers

  In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.