Maxed

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the `ID` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider disabling the functionality related to the /admin/approve.php file until a patch is available. Restrict access to the /admin/approve.php file to minimize the risk of exploitation. Avoid using the `ID` argument in the affected functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Nome do Software Vulnerável e Versões Afetadas: code-projects Car Rental System versão 1.0 Descrição: Uma questão crítica afeta uma funcionalidade desconhecida do arquivo /admin/add cars.php. A manipulação do argumento `car name` resulta em injeção de SQL. O ataque pode ser executado remotamente. O exploit foi divulgado publicamente e pode ser utilizado. Recomendações: Como solução temporária, considere restringir o acesso ao arquivo /admin/add cars.php até que um patch esteja disponível. Evite utilizar o argumento `car name` no endpoint da API afetado até que a questão seja resolvida. Atualmente, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Booking version 1.0 Description: A critical vulnerability has been found in the code-projects Online Hotel Booking software. This issue affects unknown code of the file /admin/registration.php. The manipulation of the `uname` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider disabling the `/admin/registration.php` file until a patch is available. Restrict access to the `uname` argument in the affected API endpoint to minimize the risk of exploitation. Avoid using the `uname` parameter in the `/admin/registration.php` file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.