Car Portal

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-6510 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PWRS or (2) Description field when posting. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Car Portal

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

5.1%

CVE-2012-6509 HIGH POC This Week

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Car Portal

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

4.9%

CVE-2012-6508 MEDIUM POC This Month

Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change arbitrary. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

CSRF PHP Car Portal

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.4%

CVE-2012-6510

EPSS 5% CVSS 4.3

MEDIUM POC This Month

XSS Car Portal

NVD Exploit-DB

CVE-2012-6509

EPSS 5% CVSS 7.5

HIGH POC This Week

PHP File Upload Car Portal

NVD Exploit-DB

CVE-2012-6508

EPSS 0% CVSS 6.8

MEDIUM POC This Month

CSRF PHP Car Portal

NVD Exploit-DB