CVE-2024-42552

CVE-2024-42552 affects Hotel Management System (commit 91caab8). A SQL injection exists in the book_id parameter of admin_room_history.php, enabling potential unauthenticated remote exploitation. PT-2024-30011 notes that for version 91caab8, administrators should consider disabling access to the ...