SQL injection in PHP Jabbers Car Rental Script (CVE-2025-67649)

A SQL injection vulnerability exists in PHP Jabbers Car Rental Script due to improper neutralization of user-supplied input in parameters responsible for sorting functions. An unauthenticated attacker can exploit this flaw to perform SQL injection attacks against the affected system. Affected versions: - All before 4.1 We recommend updating to: 4.1. CVSS 9.3 · our assessment: act_now Reference: https://cert.pl/en/posts/2026/07/CVE-2025-67649/ Details: https://vuln.today/cve/CVE-2025-67649