CVE-2025-63453

CVE-2025-63453 affects Car-Booking-System-PHP v1.0 with a SQL Injection vulnerability in /carlux/contact.php caused by insufficient input validation when processing user data. The CVSS 3.1 base metrics indicate a CRITICAL impact (C/H, I/H, A/H) with network attack vector, low attack complexity, a...

CVE-2025-63451

CVE-2025-63451 affects Car-Booking-System-PHP v1.0 vulnerable via SQL Injection in /carlux/sign-in.php due to insufficient input validation. Underlying flaw enables unauthorized data access/manipulation with high impact across confidentiality, integrity, and availability (CVSS 3.1: 9.8). Evidence...

CVE-2025-63450

CVE-2025-63450 affects Car-Booking-System-PHP v1.0 with a Cross-Site Scripting (XSS) vulnerability in /carlux/booking.php. The Red Hat, EUVD, CIRCL, NVD, and CVE records corroborate an XSS issue; however, the exact vulnerable parameter is not consistently specified across sources. Exploitation st...

CVE-2025-63452

CVE-2025-63452 affects Car-Booking-System-PHP v1.0 and is due to a SQL Injection in the /carlux/forgot-pass.php endpoint. The vulnerability stems from insufficient input validation on user-supplied data used in SQL queries, as indicated by multiple sources. The CVSSv3.1 base score is 9.4 (CRITICA...