CVE-2025-6355

SourceCodester Online Hotel Reservation System 1.0 contains a SQL injection in /admin/execeditroom.php via the userid parameter. The vulnerability is remote and has been publicly disclosed. Exploitation is possible without authentication and can lead to high-impact results (confidentiality, integ...