A vulnerability classified as critical has been found in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection.
This vulnerability is registered as CVE-2026-5368. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
