CVE-2025-63452

CVE-2025-63452 affects Car-Booking-System-PHP v1.0 and is due to a SQL Injection in the /carlux/forgot-pass.php endpoint. The vulnerability stems from insufficient input validation on user-supplied data used in SQL queries, as indicated by multiple sources. The CVSSv3.1 base score is 9.4 (CRITICA...