4 matches found
CVE-2025-63453
The Car-Booking-System-PHP v.1.0 software is vulnerable to SQL Injection within the /carlux/contact.php file. The root cause is insufficient input validation when processing data submitted through this specific file, as the application fails to properly neutralize special elements used in SQL com...
CVE-2025-63451
The Car-Booking-System-PHP software, version 1.0 , is vulnerable to SQL Injection within the /carlux/sign-in.php file. The root cause is insufficient input validation when processing user-supplied data, although the specific vulnerable parameter is not specified. This vulnerability allows for una...
CVE-2025-63450
The Car-Booking-System-PHP software, version 1.0 , is vulnerable to Cross-Site Scripting (XSS) within the /carlux/booking.php file. This vulnerability allows for the injection of malicious scripts through the affected endpoint, though the specific vulnerable parameter is not identified. The impac...
CVE-2025-63452
The Car-Booking-System-PHP v.1.0 application is vulnerable to SQL Injection within the /carlux/forgot-pass.php file. The root cause is insufficient input validation when processing user-supplied data, which could allow an attacker to execute unauthorized SQL commands. The vulnerability results in...