CVE-2025-0339

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
code-projects	Online Bike Rental	1.0

References

https://code-projects.org/Product
https://vuldb.com/?ctiid.290826Permissions Required, VDB Entry
https://vuldb.com/?id.290826Third Party Advisory, VDB Entry
https://vuldb.com/?submit.475731Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jan 9, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-03409.8A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an u CVE-2025-03419.8A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this i CVE-2025-03425.4A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unkn CVE-2025-03437.5Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itse CVE-2025-03448.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of CVE-2025-03458.8A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sy CVE-2025-03467.2A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part o CVE-2025-03479.8A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unk CVE-2025-03485.4A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unkno CVE-2025-03499.8A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /g CVE-2025-03505.4The Divi Carousel Maker – Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting v CVE-2025-03527.5Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially