{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3acar_rental_management_system1.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:*:car_rental_management_system:1.0:*:*:*:*:*:*:*","cpe:2.3:a:*:car_rental_management_system:1.1:*:*:*:*:*:*:*","cpe:2.3:a:*:car_rental_management_system:1.2:*:*:*:*:*:*:*","cpe:2.3:a:*:car_rental_management_system:1.3:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2024-53345"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Car Rental Management System (1.0-1.3)"],"_cs_severities":["high"],"_cs_tags":["arbitrary-file-upload","rce","web-application-vulnerability"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2024-53345 is a critical vulnerability affecting the Car Rental Management System versions 1.0 through 1.3. The vulnerability exists within the file upload functionality of the System Settings module, where improper validation of file types allows users with low privileges to upload arbitrary files, including executable PHP scripts. The application fails to enforce access controls on the upload directory, enabling attackers to retrieve the uploaded shell. Once a malicious PHP script is stored, an attacker can execute arbitrary system commands by supplying a 'cmd' parameter to the URL of the uploaded file. Depending on the server configuration, this vulnerability may be exploitable without authentication, leading to full server compromise, data exfiltration, and potential lateral movement within the network. The public availability of functional exploit code significantly increases the risk to organizations running this software.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eThe attacker identifies a target instance of the Car Rental Management System (v1.0-1.3).\u003c/li\u003e\n\u003cli\u003eThe attacker obtains a valid session ID (PHPSESSID) or identifies a misconfigured deployment that permits unauthenticated access to the file upload feature.\u003c/li\u003e\n\u003cli\u003eThe attacker sends a POST request to the file upload endpoint within the System Settings module.\u003c/li\u003e\n\u003cli\u003eThe request includes a malicious PHP web shell disguised as a legitimate file, bypassing inadequate server-side validation.\u003c/li\u003e\n\u003cli\u003eThe server writes the PHP shell to the target directory, typically located at '/car_rental/admin/assets/uploads/'.\u003c/li\u003e\n\u003cli\u003eThe attacker sends a GET or POST request to the newly uploaded file path, appending the 'cmd' parameter (e.g., /car_rental/admin/assets/uploads/shell.php?cmd=whoami).\u003c/li\u003e\n\u003cli\u003eThe server-side script executes the provided command via the shell, returning the output to the attacker.\u003c/li\u003e\n\u003cli\u003eThe attacker achieves remote code execution (RCE) on the underlying host, facilitating further exploitation or data theft.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability results in remote code execution, granting the attacker unauthorized control over the host server. This allows for the compromise of sensitive data stored within the Car Rental Management System, escalation of privileges, and potential lateral movement into the wider internal network. The severity is compounded by the ease of execution once the initial shell is uploaded.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify and audit all instances of the Car Rental Management System running versions 1.0-1.3 within the network.\u003c/li\u003e\n\u003cli\u003eApply strict server-side validation to ensure that only expected file types are permitted during upload, specifically blocking '.php' and other script extensions.\u003c/li\u003e\n\u003cli\u003eReconfigure the web server to disable the execution of scripts within the upload directory (e.g., using 'php_flag engine off' in Apache or equivalent restrictions in Nginx).\u003c/li\u003e\n\u003cli\u003eRestrict access to the file upload functionality to authorized administrative users only.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for suspicious requests targeting '/car_rental/admin/assets/uploads/' with common shell filenames or the presence of the 'cmd' query parameter.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T02:11:12Z","date_published":"2026-10-12T02:11:12Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2024-53345/","summary":"CVE-2024-53345 is an arbitrary file upload vulnerability in the Car Rental Management System (versions 1.0-1.3) that allows authenticated attackers to achieve remote code execution via uploaded PHP web shells.","title":"CVE-2024-53345: Arbitrary File Upload in Car Rental Management System","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2024-53345/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:*:car_rental_management_system:1.0:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}