CVE-2025-8337: code-projects Simple Car Rental System add_vehicles.php cross site scripting
A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8337?
CVE-2025-8337 is classified as a problematic vulnerability affecting the Simple Car Rental System 1.0.
How does CVE-2025-8337 exploit the Simple Car Rental System?
CVE-2025-8337 exploits the system through improper handling of the car_name argument in the /admin/add_vehicles.php file, leading to cross-site scripting.
What systems are affected by CVE-2025-8337?
The vulnerable system is the Simple Car Rental System version 1.0 developed by Code-projects.
How do I fix CVE-2025-8337?
Fixing CVE-2025-8337 involves sanitizing user input in the car_name parameter to prevent cross-site scripting attacks.
What are the potential impacts of CVE-2025-8337?
The potential impacts of CVE-2025-8337 include unauthorized script execution in users' browsers, leading to data theft and web application compromise.