Car-Booking-System-PHP version 1.0 contains a SQL Injection vulnerability in the /carlux/forgot-pass.php script. This vulnerability allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to full compromise of the database confidentiality and integrity, with limited impact on availability.