Cpe:2.3:a:anisha:car_rental_system:1.0:*:*:*:*:*:*:*

CVE-2025-6907 is a critical SQL injection vulnerability in Anisha Car Rental System 1.0 that allows unauthenticated attackers to execute arbitrary database queries via the fname parameter in book_car.php.