CVE-2020-21012

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

CVE-2020-21012

CVE-2020-21012 affects Sourcecodester Hotel and Lodge Management System 2.0. The vulnerability is an unauthenticated SQL injection via the email parameter on the edit page for multiple entities (Customer, Room, Currency, Room Booking Details, Tax Details), enabling an attacker to execute arbitrar...