Car Rental Project vulnerabilities

2 known vulnerabilities in Car Rental Project from ProjectWorlds. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Car Rental Project: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5634Apr 6, 2026ProjectWorlds

  A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book_car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The

• 9.8 Critical severity

  Car Rental Project: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-5368Apr 2, 2026ProjectWorlds

  A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of