CVE-2025-6579: code-projects Car Rental System message_admin.php sql injection
A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6579?
CVE-2025-6579 has been rated as critical due to its potential for SQL injection.
What software is affected by CVE-2025-6579?
CVE-2025-6579 affects the Code-projects Car Rental System version 1.0.
How does CVE-2025-6579 affect the application?
CVE-2025-6579 allows attackers to manipulate the Message argument in /message_admin.php, leading to SQL injection.
How do I fix CVE-2025-6579?
To fix CVE-2025-6579, validate and sanitize all user inputs in the application to prevent SQL injection.
Can CVE-2025-6579 be exploited remotely?
Yes, CVE-2025-6579 can be exploited remotely, making it a serious security threat.