Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•0 views

CVE-2025-13075: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be...

9.8CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•0 views

CVE-2025-13076: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

9.8CVSS5.5AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/08 12:00 a.m.•0 views

CVE-2025-12913: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•0 views

CVE-2025-12856: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/03/19 7:31 p.m.•51 views

CVE-2023-1498 code-projects Responsive Hotel Site Newsletter Log messages.php sql injection

A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...

6.5CVSS10AI score0.00871EPSS
SaveExploits0References3
Rows per page
Query Builder