CVE-2024-12981

CodeAstro Car Rental System 1.0 contains an SQL injection in /bookingconfirm.php caused by improper handling of the driver_id_from_dropdown parameter. The vulnerability can be exploited remotely and has been disclosed publicly; other parameters may be affected as well. The affected component is t...

CVE-2025-3204

The CVE-2025-3204 entry concerns CodeAstro Car Rental System 1.0, where the /returncar.php file’s ID parameter can be manipulated to perform SQL injection. The vulnerability allows remote exploitation and is classified as critical, with multiple sources confirming the issue and its potential impa...