CVE-2025-8378 Campcodes Online Hotel Reservation System Login index.php sql injection

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...

PT-2025-31506 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A problematic vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The vulnerability affects unknown code within the /admin/add query account.php file...

CampCodes Online Hotel Reservation System 注入漏洞

CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Hotel Reservation System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter roomid in th...

CampCodes Online Hotel Reservation System 代码注入漏洞

CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. A code injection vulnerability exists in Campcodes Online Hotel Reservation System version 1.0, which originates from a cross-site scripting attack due to a misbehavior of the parameter Nam...

PT-2025-31503 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0, affecting an unknown part of the file /admin/edit room.php. Manipulation of the photo argumen...

CampCodes Online Hotel Reservation System 代码问题漏洞

CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. A code issue vulnerability exists in version 1.0 of the Campcodes Online Hotel Reservation System, which stems from the incorrect operation of the parameter photo in the file...

PT-2025-31508 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability has been identified in Campcodes Online Hotel Reservation System. The issue affects unknown processing within the /add reserve.php file. Manipulation ...

PT-2025-31522 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The issue is a SQL injection vulnerability affecting an unknown function within the /admin/ed...

PT-2025-31502 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical issue exists in Campcodes Online Hotel Reservation System 1.0, specifically within the Login component. The vulnerability is due to SQL injection, resulting from th...

CVE-2025-8381: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /addreserve.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-8379: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-8380: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-8378: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2025-8382: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/editroom.php. The manipulation of the argument roomid leads to sql injection. It is possible to launch the attack remotely. The exploit...

UBUNTU-CVE-2025-53357

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

CVE-2025-53357 GLPI permits reservation modification by unauthorized users

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

CVE-2025-53357 GLPI permits reservation modification by unauthorized users

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

CVE-2025-53357

GLPI (Gestionnaire Libre de Parc Informatique) is affected in versions 0.78–10.0.18, where a connected user can alter another user’s reservations. The issue is fixed in version 10.0.19. Affected products: GLPI Asset/IT Management software; impact: permission/reservation modification by an authent...

GLPI 安全漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

WordPress My Reservation System plugin cross-site scripting vulnerability

WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...