CVE-2025-6448: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument roomid leads to sql injection. The attack can be...

CVE-2024-42768

A Cross-Site Request Forgery (CSRF) vulnerability exists in Kashipara Hotel Management System v1.0 within the /admin/delete_room.php endpoint. The root cause is the application's failure to adequately validate that requests originate from a trusted user, allowing an attacker to forge malicious re...

CVE-2024-42768: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/deleteroom.php...

CVE-2024-42774: Improper Privilege Management

An Incorrect Access Control vulnerability was found in /admin/deleteroom.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section...