CVE-2017-17637

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Car Rental Script version 2.0.4 has an SQL Injection vulnerability via the val parameter in the countrycode1.php file.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to update the script to the latest version and implement input filtering and validation.

Original NVD description (English source)

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.