Lucene search

Hotels Server Security Vulnerabilities - CVSS Score 9 - 10

cve

Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.

9.8CVSS

9.9AI Score

0.002EPSS

2019-01-20 08:29 PM

cve

Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.

9.8CVSS

9.9AI Score

0.002EPSS

2019-02-17 03:29 PM

cve

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter.

9.8CVSS

9.7AI Score

0.002EPSS

2023-02-17 06:15 PM