Fiche vulnérabilité
CVE-2025-4456 : faille élevée Project Worlds Car Rental Project (CVSS 7.3)
Description
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
En bref
- Sévérité
- Élevée (CVSS 7.3)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Exploitation active
- Non signalée par la CISA
- Publication
- 9 mai 2025
- Dernière mise à jour
- 9 mai 2025
Produits concernés
- Project Worlds Car Rental Project