A vulnerability was found in projectworlds Car Rental System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection.
This vulnerability is traded as CVE-2026-5637. The attack may be launched remotely. Furthermore, there is an exploit available.
