Wangyiqi

Name of the Vulnerable Software and Affected Versions projectworlds Car Rental Project version 1.0 Description A vulnerability exists in projectworlds Car Rental Project 1.0 related to SQL injection. The issue is located in the `/book car.php` file within the Parameter Handler component. Manipulation of the `fname` argument can lead to SQL injection, and the attack can be initiated remotely. The exploit is publicly available. Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `/book car.php` file or sanitizing the `fname` parameter to prevent SQL injection.

Name of the Vulnerable Software and Affected Versions projectworlds Car Rental System version 1.0 Description A security vulnerability exists in projectworlds Car Rental System 1.0. The issue is related to SQL injection within the Parameter Handler component, specifically affecting code in the `/message admin.php` file. Manipulation of the `Message` parameter can lead to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed. Recommendations Update to a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions projectworlds Car Rental Project version 1.0 Description A SQL injection issue exists in the Parameter Handler component of projectworlds Car Rental Project 1.0, specifically within the /login.php file. Manipulation of the `uname` argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly disclosed. Recommendations Update to a newer version of projectworlds Car Rental Project that addresses this SQL injection issue.

**Name of the Vulnerable Software and Affected Versions** projectworlds Lawyer Management System version 1.0 **Description** A flaw exists in projectworlds Lawyer Management System 1.0. The issue is related to cross site scripting, triggered by manipulating the `Description` argument in the `/lawyer booking.php` file. This can be exploited remotely. The exploit for this issue is publicly available. **Recommendations** Apply any available updates or patches for projectworlds Lawyer Management System version 1.0. As a temporary workaround, sanitize the `Description` input to prevent script injection. Restrict access to the `/lawyer booking.php` file if possible.

**Name of the Vulnerable Software and Affected Versions** projectworlds Lawyer Management System version 1.0 **Description** A cross site scripting issue exists in projectworlds Lawyer Management System version 1.0. The issue involves the processing of the `/lawyers.php` file. Manipulation of the `first Name` argument can lead to cross site scripting. The attack can be initiated remotely. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.