Maxed

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the `ID` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider disabling the functionality related to the /admin/approve.php file until a patch is available. Restrict access to the /admin/approve.php file to minimize the risk of exploitation. Avoid using the `ID` argument in the affected functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/add cars.php. The manipulation of the `car name` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider restricting access to the /admin/add cars.php file until a patch is available. Avoid using the `car name` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Booking version 1.0 Description: A critical vulnerability has been found in the code-projects Online Hotel Booking software. This issue affects unknown code of the file /admin/registration.php. The manipulation of the `uname` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider disabling the `/admin/registration.php` file until a patch is available. Restrict access to the `uname` argument in the affected API endpoint to minimize the risk of exploitation. Avoid using the `uname` parameter in the `/admin/registration.php` file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.