cve-2025-6907

Outil d'exploitation SQLi CVE‑2025‑6907 Fichier: exploit.c Auteur: Byte Reaper Service cible: CODEPROJECT Type: Injection SQL 🔎 Aperçu Ceci est un exploit d'injection SQL autonome en C ciblant la vulnérabilité CVE‑2025‑6907 dans le service CODEPROJECT. Il combine plusieurs techniques avancées :...

CVE-2026-5634

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-5634: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6907 code-projects Car Rental System book_car.php sql injection

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /bookcar.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-6907: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /bookcar.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-11632

CVE-2024-11632 affects code-projects Simple Car Rental System 1.0. The vulnerability is in the unknown function of /book_car.php, where manipulation of parameters fname, id_no, gender, email, phone, and location leads to SQL injection. It can be exploited remotely, and the exploit has been public...

CVE-2024-11632: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

CVE-2020-11545: Improper Neutralization of Special Elements used in an SQL Command

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...