CVE-2025-67649

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - cvd@cert.pl

Published

2026-07-31

Last modified

2026-07-31

Weaknesses

CWE-89

Affected products

• Car Rental Script (Php Jabbers)

References

• https://cert.pl/en/posts/2026/07/CVE-2025-67649/
• https://www.phpjabbers.com/car-rental-script/