We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2025-67649

CVE-2025-67649

PHP

Severity: —
CVSS: —CVSS
Published: 2026-07-31
Last modified: 2026-07-31
CWE: CWE-89

Description

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.

References

https://cert.pl/en/posts/2026/07/CVE-2025-67649/
https://www.phpjabbers.com/car-rental-script/

Summary

Description

References