VULNERABILITY INTELLIGENCE

CVE-2020-11545

CVSS score9.8 CRITICAL

EPSS probability1.60%

CISA KEVNot currently listed

Published2020-04-06

Last modified2026-06-17

Description

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname and pass parameters (login.php), and id parameter (book_car.php) This allows an attacker to dump the MySQL database and to bypass the login authentication prompt.