66 matches found
CVE-2025-11399
SourceCodester Hotel and Lodge Management System 1.0 contains a SQL injection vulnerability in the /pages/save_room.php handler caused by unsafely manipulating the floorno parameter. The issue has been publicly disclosed and remotely exploitable, with proof-of-concept activity noted in multiple s...
EUVD-2025-32875
A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /login.php. Performing manipulation of the argument email results in sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-11352
A security vulnerability has been detected in code-projects Online Hotel Reservation System 1.0. This affects an unknown function of the file /admin/addexec.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclos...
PT-2025-41136
Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves SQL injection, potentially exploitable remotely, stemming from manipulation of t...
EUVD-2025-7390
Malicious code in bioql PyPI...
EUVD-2025-23259
Malicious code in bioql PyPI...
CVE-2025-11055 SourceCodester Online Hotel Reservation System updateaddress.php sql injection
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...
CVE-2025-8382
A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/editroom.php. The manipulation of the argument roomid leads to sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2025-8379
A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-8380 Campcodes Online Hotel Reservation System add_query_account.php cross site scripting
A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-8379
CVE-2025-8379 concerns Campcodes Online Hotel Reservation System version 1.0. The issue resides in the /admin/edit_room.php endpoint, where manipulating the photo parameter enables unrestricted file upload. Multiple sources confirm remote exploitation potential with public disclosure of the explo...
CVE-2025-8378
A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...
CampCodes Online Hotel Reservation System 注入漏洞
CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Hotel Reservation System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter roomid in th...
CVE-2025-6450
CVE-2025-6450 affects code-projects’ Simple Online Hotel Reservation System 1.0, with a vulnerability in the file /admin/confirm_reserve.php. The issue is a SQL injection triggered by manipulating the transaction_id parameter, allowing remote abuse. Exploit details are publicly disclosed accordin...
PT-2025-26533 · Unknown · Code-Projects Simple Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability has been found in the code-projects Simple Online Hotel Reservation System, affecting an unknown functionality of the file /admin/delete...
Projectworlds Online Hotel Booking System 注入漏洞
Projectworlds Online Hotel Booking System is an online hotel booking system from the Austrian company Projectworlds. An injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0, which is caused by an SQL injection in the checkin parameter...
Projectworlds Online Hotel Booking System 注入漏洞
Projectworlds Online Hotel Booking System is an online hotel booking system from the Austrian company Projectworlds. An injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0, which stems from an incorrect operation of the parameter checkin that can lead to SQL...
CVE-2024-12185
A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be...
CVE-2024-11050
A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic. This issue affects some unknown processing of the file /language.php. The manipulation of the argument LangID/LangName/LangEName leads to cross site scripting. The attack may be...