CVE-2024-42552

The Hotel Management System (commit 91caab8 ) is vulnerable to a SQL injection vulnerability via the book_id parameter at the admin_room_history.php endpoint. This flaw allows for potential unauthenticated remote exploitation . Administrators are advised to review logs for signs of compromise and...