Vulnerabilities (CVE)

Filtered by vendor Projectworlds Subscribe
Filtered by product Official Car Rental System
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-11545 1 Projectworlds 1 Official Car Rental System 2020-04-06 7.5 HIGH 9.8 CRITICAL
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname and pass parameters (login.php), and id parameter (book_car.php) This allows an attacker to dump the MySQL database and to bypass the login authentication prompt.