CVE-2025-1965

CVE-2025-1965 affects Projectworlds Online Hotel Booking 1.0. Affected is an unknown function in /admin/login.php where altering the emailusername argument yields SQL injection. This can be exploited remotely and the vulnerability is publicly disclosed. CVSS metrics in the initial record indicate...

CVE-2025-1962

The CVE-2025-1962 entry concerns projectworlds Online Hotel Booking 1.0. Affected component is the file /admin/addroom.php, where manipulation of the roomname parameter enables SQL injection. Exploitation can be performed remotely and has been publicly disclosed. Multiple sources (NVD, Red Hat, C...

CVE-2025-1963

CVE-2025-1963 affects projectworlds Online Hotel Booking 1.0. A vulnerability in the file /reservation.php arises from manipulation of the checkin parameter, causing an SQL injection. The vulnerability is exploitable remotely and, per multiple sources, the exploit has been publicly disclosed. Con...

CVE-2025-1964

CVE-2025-1964 affects projectworlds Online Hotel Booking 1.0. An SQL injection in the checkin argument of /booknow.php?roomname=Duplex is described as exploitable remotely with high impact (confidentiality, integrity, availability). Exploit exposure is noted as public in the sources. The connecte...