CVE-2025-6903: code-projects Car Rental System approve.php sql injection
A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6903?
CVE-2025-6903 is classified as a critical vulnerability.
How does CVE-2025-6903 affect the Car Rental System?
CVE-2025-6903 allows for SQL injection through manipulation of the ID parameter in the /admin/approve.php file.
What versions of Car Rental System are impacted by CVE-2025-6903?
CVE-2025-6903 affects version 1.0 of the Code-projects Car Rental System.
How can I mitigate CVE-2025-6903?
Mitigation of CVE-2025-6903 involves sanitizing user inputs and implementing prepared statements in the database queries.
Is remote exploitation possible with CVE-2025-6903?
Yes, CVE-2025-6903 can be exploited remotely by attackers.