Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-57487-and-CVE-2024-57488 — Proof-of-concept and detailed writeups for CVE-2024-57487 (authenticated RCE via file upload) and CVE-2024-57488 (stored XSS) in Online Car Rental System. | Kitploit
Tools/GitHubGitHub/aaryan-11-x/cve-2024-57487-and-cve-2024-57488
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationWeb Security
GitHubaaryan-11-x/cve-2024-57487-and-cve-2024-57488

CVE-2024-57487-and-CVE-2024-57488

Proof-of-concept and detailed writeups for CVE-2024-57487 (authenticated RCE via file upload) and CVE-2024-57488 (stored XSS) in Online Car Rental System.

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Online Car Rental System Vulnerabilities

This repository contains details about the vulnerabilities identified in Code-Projects Online Car Rental System project Version 1.0. The vulnerabilities have been assigned CVEs and include comprehensive writeups to assist in understanding and mitigating the issues.

Vulnerabilities

  1. Remote Code Execution (Authenticated) via File Upload

    • CVE-ID: CVE-2024-57487
    • Description: This vulnerability allows authenticated attackers to upload malicious PHP files, enabling remote command execution on the server.
    • View the full writeup here

  2. Stored XSS (Authenticated) in edit-vehicle.php

    • CVE-ID: CVE-2024-57488
    • Description: This vulnerability allows authenticated attackers to inject malicious JavaScript payloads that persist in the system and execute whenever the impacted page is viewed.
    • View the full writeup here

Disclaimer

These vulnerabilities have been responsibly disclosed to the project maintainers.

Acknowledgments

  • Researcher: Aaryan Golatkar
Download Tool