Car Rental Management System version 1.0 suffers from local file inclusion and remote SQL injection vulnerabilities.