CVE-2025-6447

CVE-2025-6447 affects the code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function in the file /admin/index.php, where manipulating the Username parameter leads to an SQL injection. The vulnerability is described as exploitable remotely with a publicly disclosed e...

CVE-2025-6420

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addroom.php. The manipulation of the argument roomtype leads to sql injection. The attack can be initiated remotely...

CVE-2025-6421

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addaccount.php. The manipulation of the argument name/adminid leads to sql injection. The attack may be initiated...

CVE-2025-6420

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addroom.php. The manipulation of the argument roomtype leads to sql injection. The attack can be initiated remotely...

CVE-2025-6421 code-projects Simple Online Hotel Reservation System add_account.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addaccount.php. The manipulation of the argument name/adminid leads to sql injection. The attack may be initiated...

CVE-2025-6421

CVE-2025-6421 affects code-projects Simple Online Hotel Reservation System 1.0. It exposes a SQL injection in /admin/add_account.php via the name/admin_id parameter, allowing remote exploitation. Exploit details are publicly disclosed; multiple sources corroborate the issue. Some advisories (PT-2...

CVE-2025-6421 code-projects Simple Online Hotel Reservation System add_account.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addaccount.php. The manipulation of the argument name/adminid leads to sql injection. The attack may be initiated...

CVE-2025-6420

CVE-2025-6420 affects code-projects Simple Online Hotel Reservation System 1.0, with SQL injection in /admin/add_room.php via the room_type parameter. Exploitation can be remote; exploits have been disclosed publicly. Several connected sources confirm the issue across NVD, CNVD, CIRCL, and vendor...

CVE-2025-6420 code-projects Simple Online Hotel Reservation System add_room.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addroom.php. The manipulation of the argument roomtype leads to sql injection. The attack can be initiated remotely...

CVE-2025-6419

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument roomtype leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-6419

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument roomtype leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-6418

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

CVE-2025-6418

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

CVE-2025-6419

CVE-2025-6419 affects code-projects Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in /admin/edit_room.php via the room_type parameter, exploitable remotely and publicly disclosed. External sources (CNVD/CNNVD) describe the issue; some reports advise disabling/r...

CVE-2025-6419 code-projects Simple Online Hotel Reservation System edit_room.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument roomtype leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-6418 code-projects Simple Online Hotel Reservation System edit_query_account.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

CVE-2025-6418 code-projects Simple Online Hotel Reservation System edit_query_account.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

CVE-2025-6418

CVE-2025-6418 affects Simple Online Hotel Reservation System 1.0. The vulnerability is a SQL injection in the /admin/edit_query_account.php endpoint via the Name parameter, caused by lack of input validation. The issue appears exploitable remotely, and public disclosure exists. Multiple sources c...

CVE-2025-6394

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addreserve.php. The manipulation of the argument firstname leads to sql injection. The attack can be...

CVE-2025-6394

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addreserve.php. The manipulation of the argument firstname leads to sql injection. The attack can be...