CVE-2026-7506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the argument roomtype leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2022-2292

A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /cihms/massageroom/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input " leads to cross site...

CVE-2022-2291

A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /cihms/search of the component Search. The manipulation of the argument search with the input "alert"XSS" leads to cross site scripting...

CVE-2022-2292

A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /cihms/massageroom/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "alert"XSS" leads to...

CVE-2022-2292 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /cihms/massageroom/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "alert"XSS" leads to...

CVE-2022-2292 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /cihms/massageroom/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "alert"XSS" leads to...

CVE-2022-2292

CVE-2022-2292 pertains to SourceCodester Hotel Management System 2.0. The vulnerability affects the Room Edit Page, specifically /ci_hms/massage_room/edit/1, where manipulating the argument massageroomDetails with input like > triggers cross-site scripting. The issue is exploitable remotely an...

CVE-2022-2291 SourceCodester Hotel Management System Search search cross site scripting

A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /cihms/search of the component Search. The manipulation of the argument search with the input "alert"XSS" leads to cross site scripting...

CVE-2022-2291 SourceCodester Hotel Management System Search search cross site scripting

A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /cihms/search of the component Search. The manipulation of the argument search with the input "alert"XSS" leads to cross site scripting...

Sql injection

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...