CVE-2020-11545: Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email

Project Worlds Official Car Rental System 1 has multiple SQL injection vulnerabilities (CWE-89, a flaw where attackers can manipulate database queries by inserting malicious code) in several input fields across different pages, allowing attackers to steal data from the MySQL database or bypass login authentication. The vulnerable parameters are found in the email field on account.php, the username and password fields on login.php, and the id parameter on book_car.php.