CVE-2026-5645: projectworlds Car Rental System Parameter pay.php sql injection
A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5645?
CVE-2026-5645 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2026-5645?
To fix CVE-2026-5645, validate and sanitize user inputs in the pay.php file to prevent SQL injection.
What are the potential impacts of CVE-2026-5645?
Exploiting CVE-2026-5645 can lead to unauthorized access to the database, data leakage, or data manipulation.
Which software is affected by CVE-2026-5645?
CVE-2026-5645 affects Projectworlds Car Rental System version 1.0.
What component is vulnerable in CVE-2026-5645?
The vulnerable component in CVE-2026-5645 is the Parameter Handler in the pay.php file.