CVE-2025-4457

CVE-2025-4457 affects Project Worlds Car Rental Project 1.0. The vulnerability resides in the file /admin/approve.php , where manipulating the ID parameter leads to an SQL injection. The issue can be exploited remotely, and the exploit has been publicly disclosed. Public documents consistently de...

CVE-2025-4456

CVE-2025-4456 affects Project Worlds Car Rental Project 1.0, where the vulnerability lies in an unknown function of the file /signup.php. Manipulating the fname parameter enables SQL injection and, per sources, can be exploited remotely with other parameters potentially affected. Public disclosur...

CVE-2020-24199

CVE-2020-24199 involves an Arbitrary File Upload vulnerability in the Vehicle Image Upload component of Project Worlds Car Rental Management System v1.0. The issue permits remote code execution when an attacker can upload crafted files through the image upload feature. Connected sources corrobora...

CVE-2026-5368

CVE-2026-5368 affects projectworlds Car Rental Project 1.0. The vulnerable element is an unknown function in the file /login.php of the Parameter Handler; manipulating the uname argument enables an SQL injection. Exploitation is remote and has been publicly disclosed. Multiple sources (NVD, Red H...