Attack Chain

1. Attacker identifies a target running Anisha Car Rental System 1.0.
2. Attacker sends an HTTP request to book_car.php with a crafted SQL payload in the fname parameter.
3. The application fails to sanitize the input, passing the malicious payload directly to the backend database.
4. The database executes the injected SQL command.
5. The attacker observes the result through application response content or time-based response delays.
6. Attacker leverages this access to dump database contents or potentially interact with the underlying host if administrative privileges are improperly configured.

Impact

Successful exploitation allows unauthenticated remote attackers to perform unauthorized database operations, potentially leading to full system compromise. The vulnerability is rated CVSS 9.8.

Recommendation

• Identify all instances of Anisha Car Rental System 1.0 within the environment.
• Patch or decommission affected systems immediately; there is currently no official vendor update mentioned in the exploit source.
• Block or monitor HTTP requests to book_car.php containing SQL metacharacters (e.g., single quotes, semicolons, comments, or sleep commands).
• Review web server access logs for anomalous activity involving the book_car.php endpoint.