CVE-2025-6906: code-projects Car Rental System login.php sql injection
A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6906?
CVE-2025-6906 is classified as a critical vulnerability.
What is the cause of CVE-2025-6906?
CVE-2025-6906 is caused by a SQL injection vulnerability in the /login.php file due to improper handling of the uname argument.
How can I mitigate CVE-2025-6906?
To mitigate CVE-2025-6906, validate and sanitize user inputs for the uname argument to prevent SQL injection.
Who is affected by CVE-2025-6906?
CVE-2025-6906 affects users of Code-projects Car Rental System version 1.0.
Can CVE-2025-6906 be exploited remotely?
Yes, CVE-2025-6906 can be exploited remotely, allowing attackers to manipulate the uname argument.