Lucene search
+L

2058 matches found

Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•15 views

PT-2025-41578

Name of the Vulnerable Software and Affected Versions code-projects Simple Online Hotel Reservation System version 1.0 Description The Simple Online Hotel Reservation System contains a Cross Site Scripting XSS issue within the Add Room function. Specifically, entering malicious JavaScript code in...

4.1CVSS6.2AI score0.00245EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/10 12:00 a.m.•7 views

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

5.6AI score0.00245EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•14 views

Code-Projects Simple Online Hotel Reservation System 安全漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. A cross-site scripting vulnerability exists in Simple Online Hotel Reservation System, which arises from unvalidated input to the Description field in the Add Room function, no details of the vulnerability are...

4.1CVSS6.1AI score0.00245EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•5 views

CVE-2025-60308: Improper Neutralization of Input During Web Page Generation

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting XSS vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing...

4.1CVSS5.7AI score0.00245EPSS
SaveExploits1References3
CVE
CVE
•added 2025/10/10 12:00 a.m.•42 views

CVE-2025-60308

The code-projects Simple Online Hotel Reservation System 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Add Room function. The root cause is the lack of input validation for the Description field, which allows an attacker to inject malicious JavaScript. If an administrator v...

4.1CVSS5.6AI score0.00245EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/09 1:27 p.m.•20 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/08 4:47 p.m.•12 views

CVE-2025-11400

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /delroom.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

9.8CVSS7.1AI score0.0035EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/08 12:15 p.m.•11 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/08 12:15 p.m.•13 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/08 12:02 p.m.•9 views

CVE-2025-11472 SourceCodester Hotel and Lodge Management System edit_room.php sql injection

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

7.5CVSS7AI score0.00478EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/08 12:02 p.m.•31 views

CVE-2025-11472 SourceCodester Hotel and Lodge Management System edit_room.php sql injection

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

7.5CVSS0.00478EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•15 views

PT-2025-41249

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves the manipulation of the ID argument in the /edit room.php file, leading to a SQL...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•14 views

SourceCodester Hotel and Lodge Management System SQL注入漏洞

SourceCodester Hotel and Lodge Management System is SourceCodester open source hotel and lodge management system. A SQL injection vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/07 4:15 p.m.•14 views

CVE-2025-11399

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/saveroom.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has bee...

9.8CVSS5.7AI score0.0035EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/07 4:02 p.m.•8 views

CVE-2025-11400 SourceCodester Hotel and Lodge Management System del_room.php sql injection

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /delroom.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS6.5AI score0.0035EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/07 4:02 p.m.•27 views

CVE-2025-11400

SourceCodester Hotel and Lodge Management System 1.0 contains a SQL injection vulnerability in the /del_room.php endpoint triggered by manipulating the ID parameter. The CVE-2025-11400 entries indicate remote exploitation with publicly available exploits. The issue is documented with multiple ven...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/07 4:02 p.m.•29 views

CVE-2025-11400 SourceCodester Hotel and Lodge Management System del_room.php sql injection

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /delroom.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.0035EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 3:32 p.m.•13 views

EUVD-2025-32727

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/saveroom.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.0035EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/07 3:32 p.m.•8 views

CVE-2025-11399 SourceCodester Hotel and Lodge Management System save_room.php sql injection

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/saveroom.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.0035EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2017-1877

Malware in sbrugna...

5.5CVSS6AI score0.01164EPSS
SaveExploits0References4
Rows per page
Query Builder