CVE-2026-5705: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the...

CVE-2025-6917 code-projects Online Hotel Booking registration.php sql injection

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6917: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

PT-2025-27463 · Code Projects · Code-Projects Online Hotel Booking

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Booking version 1.0 Description: A critical vulnerability has been found in the code-projects Online Hotel Booking software. This issue affects unknown code of the file /admin/registration.php. The manipulation of t...