CVE 6.9 MEDIUM

projectworlds Car Rental System Parameter message_admin.php sql injection_CVE-2026-5637

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Basic Information

ID CVE-2026-5637
Source VulDB
Published Apr 6, 2026 at 08:15
Modified Apr 6, 2026 at 18:31

Affected Product

Vendor projectworlds
Product Car Rental System
Version 1.0
Affected Versions projectworlds Car Rental System 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.