CVE-2025-1964 projectworlds Online Hotel Booking booknow.php sql injection

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects some unknown processing of the file /booknow.php?roomname=Duplex. The manipulation of the argument checkin leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-1964

CVE-2025-1964 affects projectworlds Online Hotel Booking 1.0. An SQL injection in the checkin argument of /booknow.php?roomname=Duplex is described as exploitable remotely with high impact (confidentiality, integrity, availability). Exploit exposure is noted as public in the sources. The connecte...