CVE-2023-1561

The CVE-2023-1561 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. Affected is an unknown function in add_room.php where manipulation leads to unrestricted file uploads. The vulnerability enables remote exploitation, per the provided description, with no explicit remediat...

CVE-2024-0504

CVE-2024-0504 affects code-projects Simple Online Hotel Reservation System 1.0, specifically the add_reserve.php file of the Make a Reservation Page. The vulnerability is a cross-site scripting issue caused by unsafely handling Firstname/Lastname input (example payload: ). The attack is remote an...

CVE-2025-12593

CVE-2025-12593 affects code-projects Simple Online Hotel Reservation System 2.0. The Photo Handler component, via /admin/edit_room.php, lacks validation for uploaded files, enabling unrestricted file uploads. Exploitation is possible remotely and a public exploit exists. Connected sources do not ...

CVE-2025-6450

CVE-2025-6450 affects code-projects’ Simple Online Hotel Reservation System 1.0, with a vulnerability in the file /admin/confirm_reserve.php. The issue is a SQL injection triggered by manipulating the transaction_id parameter, allowing remote abuse. Exploit details are publicly disclosed accordin...

CVE-2025-6447

CVE-2025-6447 affects the code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function in the file /admin/index.php, where manipulating the Username parameter leads to an SQL injection. The vulnerability is described as exploitable remotely with a publicly disclosed e...

CVE-2025-6448

CVE-2025-6448 applies to code-projects Simple Online Hotel Reservation System 1.0. The vulnerability is in the file /admin/delete_room.php where the argument/parameter room_id is unsafely handled, leading to a SQL injection. It is described as exploitable remotely, with exploit information public...

CVE-2025-6420

CVE-2025-6420 affects code-projects Simple Online Hotel Reservation System 1.0, with SQL injection in /admin/add_room.php via the room_type parameter. Exploitation can be remote; exploits have been disclosed publicly. Several connected sources confirm the issue across NVD, CNVD, CIRCL, and vendor...

CVE-2025-6418

CVE-2025-6418 affects Simple Online Hotel Reservation System 1.0. The vulnerability is a SQL injection in the /admin/edit_query_account.php endpoint via the Name parameter, caused by lack of input validation. The issue appears exploitable remotely, and public disclosure exists. Multiple sources c...

CVE-2025-6394

The CVE-2025-6394 entry concerns code-projects Simple Online Hotel Reservation System 1.0, where the file /add_reserve.php exposes a SQL injection via the firstname parameter. This vulnerability is exploitable remotely and has been disclosed publicly. Multiple connected documents (CNVD/CNNVD/Red ...

CVE-2025-6578

The CVE-2025-6578 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. A vulnerability exists in the /admin/delete_account.php file where manipulating the admin_id parameter triggers a SQL injection. The issue is exploitable remotely and has been disclosed publicly. Affected ...

CVE-2025-13169

CVE-2025-13169 affects the Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in the file /add_query_reserve.php caused by unsafely handling the room_id parameter, allowing remote exploitation. Public disclosures exist, and multiple sources (CNVD, RH, CNNVD, NVD, CV...

CVE-2025-6449

CVE-2025-6449 affects the code-projects Simple Online Hotel Reservation System 1.0. The vulnerability is a SQL injection in the file /admin/checkout_query.php triggered by manipulating the transaction_id parameter. Its impact, per sources, includes potential remote exploitation and access to sens...

CVE-2025-6421

CVE-2025-6421 affects code-projects Simple Online Hotel Reservation System 1.0. It exposes a SQL injection in /admin/add_account.php via the name/admin_id parameter, allowing remote exploitation. Exploit details are publicly disclosed; multiple sources corroborate the issue. Some advisories (PT-2...

CVE-2025-6451

The CVE-2025-6451 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. Multiple connected sources confirm a SQL injection in the file /admin/delete_pending.php via the transaction_id parameter, allowing remote exploitation. The issue stems from lack of validation/sanitization...

CVE-2025-13170

CVE-2025-13170 concerns the Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in the admin/account editing flow, triggered by manipulating the parameter admin_id in /admin/edit_account.php. Multiple connected sources confirm remote exploitation possibilities and th...

CVE-2025-60308

The code-projects Simple Online Hotel Reservation System 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Add Room function. The root cause is the lack of input validation for the Description field, which allows an attacker to inject malicious JavaScript. If an administrator v...

CVE-2025-12594

The CVE-2025-12594 entry concerns code-projects Simple Online Hotel Reservation System 2.0. A SQL injection vulnerability exists in the file /admin/add_account.php (parameter Name). Multiple connected sources confirm remote exploitation with the exploit publicly released, enabling an attacker to ...

CVE-2025-6419

CVE-2025-6419 affects code-projects Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in /admin/edit_room.php via the room_type parameter, exploitable remotely and publicly disclosed. External sources (CNVD/CNNVD) describe the issue; some reports advise disabling/r...