CVE-2026-5634 | projectworlds Car Rental Project 1.0 Parameter /book_car.php fname sql injection

A vulnerability has been found in projectworlds Car Rental Project 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /book_car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection.

This vulnerability is documented as CVE-2026-5634. The attack can be initiated remotely. Additionally, an exploit exists.