Vendor
CVE-2025-6907 is a critical SQL injection vulnerability in Anisha Car Rental System 1.0 that allows unauthenticated attackers to execute arbitrary database queries via the fname parameter in book_car.php.