CVE-2020-29287
9.8
CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.76% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-12-02 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| car rental management system project | car rental management system |
References
- https://github.com/BigTiger2020/Car-Rental-Management-System/blob/main/README.md
- https://www.exploit-db.com/exploits/49056
- https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html
- https://github.com/BigTiger2020/Car-Rental-Management-System/blob/main/README.md
- https://www.exploit-db.com/exploits/49056
- https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html
→ the Explorer · watch your stack · NVD