CVE-2018-20647

PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.

• CWE-22

• https://gkaim.com/cvehttps://gkaim.com/cve-2018-20647-vikas-chaudhary/Broken Link, Third Party Advisory
• https://gkaim.com/cve-2018-20647-vikas-chaudhary/Exploit, Third Party Advisory
• https://gkaim.com/cvehttps://gkaim.com/cve-2018-20647-vikas-chaudhary/Broken Link, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20641PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cr…
• CVE-2018-20642PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows…
• CVE-2018-20643PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has di…
• CVE-2018-20644PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Reque…
• CVE-2018-20645PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection v…
• CVE-2018-20646PHP Scripts Mall Basic B2B Script 2.0.9 has has directory tr…
• CVE-2018-20648PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Requ…
• CVE-2018-2065Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20650A reachable Object::dictLookup assertion in Poppler 0.72.0 a…6.5
• CVE-2018-20651A NULL pointer dereference was discovered in elf_link_add_ob…
• CVE-2018-20652An attempted excessive memory allocation was discovered in t…
• CVE-2018-20655When receiving calls using WhatsApp for iOS, a missing size …9.8