Car Rental System vulnerabilities

2 known vulnerabilities in Car Rental System from ProjectWorlds. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Car Rental System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5645Apr 6, 2026ProjectWorlds

  A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection.

• 7.3 High severity

  Car Rental System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5637Apr 6, 2026ProjectWorlds

  A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The