Lucene search
+L

30 matches found

NVD
NVD
•added 2026/07/05 2:16 p.m.•28 views

CVE-2026-14754

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/05 2:00 p.m.•57 views

CVE-2026-14754

The CVE covers code-projects Hotel and Tourism Reservation 1.0, where the /admin/add_room.php function is vulnerable. Manipulating the arguments delete_image, edit/description, number, price, rooms, or type can trigger an SQL injection. The attack can be launched remotely, and a public exploit ha...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/05 2:00 p.m.•26 views

EUVD-2026-41760

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/05 2:00 p.m.•46 views

CVE-2026-14754 code-projects Hotel and Tourism Reservation add_room.php sql injection

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/05 2:00 p.m.•17 views

CVE-2026-14754 code-projects Hotel and Tourism Reservation add_room.php sql injection

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•40 views

PT-2026-55800

Name of the Vulnerable Software and Affected Versions code-projects Hotel and Tourism Reservation version 1.0 Description A remote SQL injection flaw exists in the /admin/add room.php endpoint. The issue occurs when manipulating the delete image, edit, description, number, price, rooms, or type...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References10
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•21 views

Simple Online Hotel Reservation System Cross-Site Scripting Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. A cross-site scripting vulnerability exists in Simple Online Hotel Reservation System, which arises from unvalidated input to the Description field in the Add Room function, no details of the vulnerability are...

4.1CVSS6.2AI score0.00245EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/11 12:20 a.m.•24 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS6AI score0.00245EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/10 6:31 p.m.•20 views

EUVD-2025-33757

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS5.5AI score0.00245EPSS
SaveExploits1References3
NVD
NVD
•added 2025/10/10 5:15 p.m.•17 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS0.00245EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/10 5:15 p.m.•17 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS5.8AI score0.00245EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/10/10 12:00 a.m.•25 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

0.00245EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•15 views

PT-2025-41578

Name of the Vulnerable Software and Affected Versions code-projects Simple Online Hotel Reservation System version 1.0 Description The Simple Online Hotel Reservation System contains a Cross Site Scripting XSS issue within the Add Room function. Specifically, entering malicious JavaScript code in...

4.1CVSS6.2AI score0.00245EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/10 12:00 a.m.•7 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

5.6AI score0.00245EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•14 views

Code-Projects Simple Online Hotel Reservation System 安全漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. A cross-site scripting vulnerability exists in Simple Online Hotel Reservation System, which arises from unvalidated input to the Description field in the Add Room function, no details of the vulnerability are...

4.1CVSS6.1AI score0.00245EPSS
SaveExploits1References3
CVE
CVE
•added 2025/10/10 12:00 a.m.•42 views

CVE-2025-60308

The code-projects Simple Online Hotel Reservation System 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Add Room function. The root cause is the lack of input validation for the Description field, which allows an attacker to inject malicious JavaScript. If an administrator v...

4.1CVSS5.6AI score0.00245EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•5 views

CVE-2025-60308: Improper Neutralization of Input During Web Page Generation

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS5.7AI score0.00245EPSS
SaveExploits1References3
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•15 views

Simple Online Hotel Reservation System add_room.php File SQL Injection Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter roomtype in the file...

9.8CVSS8.3AI score0.00547EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/06/21 9:31 p.m.•2 views

CVE-2025-6420 code-projects Simple Online Hotel Reservation System add_room.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addroom.php. The manipulation of the argument roomtype leads to sql injection. The attack can be initiated remotely...

7.5CVSS7.5AI score0.00547EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•12 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter roomtype in the file...

9.8CVSS8.2AI score0.00547EPSS
SaveExploits1References6
Rows per page
Query Builder