CVE-2025-6904

The CVE-2025-6904 entry covers a SQL injection in code-projects Car Rental System 1.0, affecting /admin/add_cars.php via the car_name parameter. Multiple connected sources corroborate an remote-executable vulnerability leading to data theft, with exploit publicly disclosed. Root cause: missing va...

CVE-2025-6907

The CVE-2025-6907 entry affects code-projects Car Rental System 1.0 and is tied to a SQL injection in /book_car.php via the fname parameter. Multiple sources confirm remote exploitation and public disclosure of the exploit, including a GitHub SQLi tool targeting the Car Rental System. Some refere...

CVE-2025-6667

CVE-2025-6667 affects Code-Projects Car Rental System 1.0. The vulnerability lies in the file /admin/add_cars.php where the image parameter can be manipulated to achieve unrestricted file upload. This enables remote exploitation and may allow attackers to upload arbitrary files, potentially impac...

CVE-2025-6903

CVE-2025-6903 affects code-projects Car Rental System 1.0. The vulnerability is an SQL injection in the /admin/approve.php file, triggered by manipulating the ID parameter. It is exploitable remotely and the exploit has been disclosed publicly. Multiple connected sources corroborate the issue and...

CVE-2025-6906

CVE-2025-6906 affects code-projects Car Rental System 1.0. The vulnerability is a SQL injection in the login.php file via the uname parameter, enabling remote exploitation. Documents repeatedly state this issue and public disclosure; no concrete patch/version fix is provided. Affected component: ...

CVE-2025-6905

Code-projects Car Rental System 1.0 is reported vulnerable to SQL injection in signup.php via the fname parameter. Multiple sources indicate remote exploitation with public PoC content; impact includes potential data disclosure. Some advisories recommend not using fname in signup.php as a tempora...

CVE-2025-6579

CVE-2025-6579 affects code-projects Car Rental System 1.0. The issue is SQL injection in the message_admin.php file triggered by manipulating the Message parameter, exploitable remotely. Multiple sources confirm the vulnerability and its critical impact, targeting database data via unauthenticate...