car-booking-system-php vulnerabilities and fixes

Recent CVEs affecting car-booking-system-php, with upgrade or downgrade steps. 4 tracked.

Also searched as: car booking system php.

car-booking-system-php has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-03. Highest priority: CVE-2025-63453 (score 59/100).

• CVE-2025-63453 CRITICAL 9.8 DOWNGRADE Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php.
• CVE-2025-63452 CRITICAL 9.4 DOWNGRADE Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php.
• CVE-2025-63451 CRITICAL 9.8 DOWNGRADE Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php.
• CVE-2025-63450 MEDIUM 5.4 DOWNGRADE Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/booking.php.

FAQ

How do I fix car-booking-system-php vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is car-booking-system-php being exploited right now?

None of the tracked car-booking-system-php CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which car-booking-system-php CVE should I patch first?

CVE-2025-63453 currently ranks highest (59/100): Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php..

RSS feed for car-booking-system-php · ← Back to latest CVEs