CVE-2025-4456: Project Worlds Car Rental Project signup.php sql injection
Published May 9, 2025
·Updated
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
2 affected components
Project Worlds Car Rental Project
Projectworlds Car Rental Project=1.0
Event History
May 9, 2025
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-4456?
CVE-2025-4456 is classified as a critical vulnerability.
2
How does the CVE-2025-4456 vulnerability occur?
CVE-2025-4456 occurs due to SQL injection via manipulation of the 'fname' argument in the /signup.php file.
3
Can CVE-2025-4456 be exploited remotely?
Yes, CVE-2025-4456 can be exploited remotely.
4
What software is affected by CVE-2025-4456?
CVE-2025-4456 affects Project Worlds Car Rental Project version 1.0.
5
How do I fix CVE-2025-4456?
To fix CVE-2025-4456, you should sanitize and validate input to prevent SQL injection attacks.