CVE-2025-7475: code-projects Simple Car Rental System pay.php sql injection
Published Jul 12, 2025
·Updated
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Simple Car Rental System
Fabian Simple Car Rental System=1.0
Event History
Jul 12, 2025
CVE Published
via MITRE·12:32 PM
Data Sourced
via MITRE·12:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 14, 58473
Event
via NVD·08:38 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-7475?
CVE-2025-7475 is classified as a critical vulnerability.
2
How do I fix CVE-2025-7475?
To fix CVE-2025-7475, validate and sanitize input parameters to prevent SQL injection.
3
What software is affected by CVE-2025-7475?
CVE-2025-7475 affects Code-projects Simple Car Rental System version 1.0.
4
What type of attack does CVE-2025-7475 enable?
CVE-2025-7475 enables remote SQL injection attacks through manipulation of the mpesa argument.
5
Can the CVE-2025-7475 vulnerability be exploited remotely?
Yes, CVE-2025-7475 can be exploited remotely, allowing attackers to execute SQL injection.