CVE-2025-10621
SourceCodester Hotel Reservation System 1.0 contains a SQL injection vulnerability in editroomimage.php caused by manipulation of the ID parameter. Exploitation can be performed remotely, and publicly disclosed exploits exist. Remediation/mitigation guidance from PT-2025-38281 suggests a temporar...