CVE-2026-5637Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-06: 3Technical Details · 2026-04-06: 104-06
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-5637 A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the compone… https://www.cve.org/CVERecord?id=CVE-2026-5637

    Post summary

    The post announces that CVE‑2026‑5637 has been identified in ProjectWorlds Car Rental System 1.0, indicating the flaw affects unknown code in /message_admin.php, but provides no further technical or mitigation details.

    00010269
    57.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-5637 SQL Injection in projectworlds Car Rental System 1.0 Parameter Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5637

    Post summary

    The post announces CVE-2026-5637 as a SQL Injection vulnerability in the Parameter Handler of ProjectWorlds Car Rental System 1.0.

    0000039
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5637 A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the compone… https://www.cve.org/CVERecord?id=CVE-2026-5637 ----- Traducción: CVE-2026-5637 Se … http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑5637 impacting projectworlds Car Rental System 1.0 by affecting unknown code in /message_admin.php, with no further technical details or mitigation information provided.

    0000033
    67 followersView on X

Explore more