CVE-2025-63452
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php. The vulnerability may allow manipulation of SQL queries in the password recovery function.
Risk Assessment
An attacker could read or modify database data and potentially take over user accounts.
Recommendation
Update the application to a version that fixes the vulnerability or apply security patches. Implement input validation and parameterized queries.
Other vulnerabilities in Car-Booking-System-PHP
See all- CVE-2025-63453Critical
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php. The vulnerability may allow manipulation of SQL queries.
- CVE-2025-63451Critical
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php. The vulnerability may allow manipulation of SQL queries during login.
- CVE-2025-63450Medium
Car-Booking-System-PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/booking.php. The vulnerability allows injection of malicious script that may execute in the user's browser.
Original NVD description (English source)
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS