CVE-2025-6904: code-projects Car Rental System add_cars.php sql injection
A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addcars.php. The manipulation of the argument carname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6904?
CVE-2025-6904 has been rated as critical due to its potential for remote SQL injection.
How does CVE-2025-6904 affect the Car Rental System?
CVE-2025-6904 affects the functionality of the file /admin/add_cars.php in the Car Rental System.
What kind of attack can be launched using CVE-2025-6904?
An attacker can perform a remote SQL injection attack by manipulating the car_name argument.
How can I fix CVE-2025-6904?
To fix CVE-2025-6904, ensure that proper input validation and parameterized queries are implemented in the affected functionality.
Who is affected by CVE-2025-6904?
Users of Code-projects Car Rental System 1.0 are affected by CVE-2025-6904.