CVE-2025-63451
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php. The vulnerability may allow manipulation of SQL queries during login.
Risk Assessment
An attacker could read or modify database data and potentially bypass authentication mechanisms.
Recommendation
Update the application to a version that fixes the vulnerability or apply security patches. Implement input validation and parameterized queries.
Other vulnerabilities in Car-Booking-System-PHP
See all- CVE-2025-63453Critical
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php. The vulnerability may allow manipulation of SQL queries.
- CVE-2025-63452Critical
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php. The vulnerability may allow manipulation of SQL queries in the password recovery function.
- CVE-2025-63450Medium
Car-Booking-System-PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/booking.php. The vulnerability allows injection of malicious script that may execute in the user's browser.
Original NVD description (English source)
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS