CVE-2025-67649

CriticalCVSS 9.3

Published: 31/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

PHP Jabbers Car Rental Script before version 4.1 contains a SQL injection vulnerability in sorting parameters, allowing an unauthenticated attacker to perform SQL injection attacks.

Risk Assessment

An attacker may read, modify, or delete data in the database, including customer and booking data.

Recommendation

Update PHP Jabbers Car Rental Script to version 4.1 or later.

Original NVD description (English source)

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.