OtherMedium
CVE-2020-11545: Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demon…
- Occurred
- Apr 6, 2020
- Published
- Apr 6, 2020
- Source
- NVD CVE
Summary
Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname and pass parameters (login.php), and id parameter (book_car.php) This allows an attacker to dump the MySQL database and to bypass the login authentication prompt.
Tags
- CVE
- CVE-2020-11545
- cvss:CRITICAL
Classification
Category confidence: 80%
Severity confidence: 90%
Rationale: SQL injection vulnerability in a car rental system allows database access and login bypass, but no specific incident or harm reported.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8