CVE-2025-10843

CVE-2025-10843 affects the Reservation Online Hotel Reservation System 1.0. The vulnerability lies in the file /reservation/paypalpayout.php, where manipulation of the confirm parameter enables SQL injection. The attack can be launched remotely, and an exploit has been published. No remediation d...