PT-2026-30579 · Projectworlds · Car Rental Project

Wangyiqi · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5634

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5634

Affected Products

Car Rental Project

References · 7

• 🔥 https://github.com/eqiya17/collection-of-vulnerabilities/issues/12 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5634 · Security Note
• https://vuldb.com/vuln/355422 · Note
• https://twitter.com/infoflowcloud/status/2041077706557657292 · Twitter Post
• https://vuldb.com/vuln/355422/cti · Note
• https://twitter.com/CVEnew/status/2041076959317254563 · Twitter Post
• https://vuldb.com/submit/785863 · Note