CVE-2025-9790

🗓️ 01 Sep 2025 18:32:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 8 Views🌐 WEB

Security flaw in SourceCodester Hotel Reservation System enables database query injection via updateabout.php.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-9790	1 Sep 202521:29	–	circl
CNNVD	SourceCodester Hotel Reservation System 安全漏洞	1 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-9790 SourceCodester Hotel Reservation System updateabout.php sql injection	1 Sep 202518:32	–	cvelist
EUVD	EUVD-2025-26356	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9790	1 Sep 202519:15	–	nvd
Positive Technologies	PT-2025-35504	1 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9790	3 Sep 202518:36	–	redhatcve
Vulnrichment	CVE-2025-9790 SourceCodester Hotel Reservation System updateabout.php sql injection	1 Sep 202518:32	–	vulnrichment

NVD

Vulners

Node

fabian hotel_reservation_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Hotel Reservation System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/YoSheep/cve/blob/main/Online%20Hotel%20Reservation%20System%20In%20PHP%20With%20Source%20Code%20-%20SQL%20Injection%20in%20updateabout.php.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
sourcecodester	www.sourcecodester.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
address	request body	/admin/updateabout.php	SQL injection vulnerability via manipulated address parameter in updateabout.php	CWE-74, CWE-89

29 Apr 2026 01:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.3 - 9.8

CVSS 46.9

CVSS 27.5

CVSS 37.3

EPSS0.00066

SSVC