CVE-2025-9310: yeqifu carRental, заобикаляне на вход и права

Описание

Оригинално описание

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRental_war/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

Засегнати продукти

• yeqifu carRental: 3fabb7eae93d209426638863980301d6f99866b3

Вид слабост

• CWE-798 Use of Hard-coded Credentials
• CWE-259 Използване на твърдо кодирана парола

История

Други уязвимости в yeqifu carRental

• 6.9CVE-2025-15432
• 5.4CVE-2025-9650

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-9310
• https://nvd.nist.gov/vuln/detail/CVE-2025-9310
• https://vuldb.com/?id.320915
• https://vuldb.com/?ctiid.320915
• https://vuldb.com/?submit.633588
• https://github.com/caigo8/CVE-md/blob/main/carRentalV1.0/druid%E6%9C%AA%E6%8E%88%E6%9D%83.md