code-projects Simple Online Hotel Reservation System vulnerabilities

Latest code-projects Simple Online Hotel Reservation System CVEs

Newest publication first

1. CVE-2025-13170 code-projects Simple Online Hotel Reservation System edit_account.php sql injection

   Published 2025-11-14

   Medium·CVSS 6.9 EPSS 0.42%

   A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_account.php. Performing a manipulation of the argument admin_id results in sql injection. The attack is possible to be carr...

2. CVE-2025-13169 code-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection

   Published 2025-11-14

   Medium·CVSS 6.9 EPSS 0.48%

   A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /add_query_reserve.php. Such manipulation of the argument room_id leads to sql injection. The attack can be executed remotel...

3. CVE-2025-12594 code-projects Simple Online Hotel Reservation System add_account.php sql injection

   Published 2025-11-02

   Medium·CVSS 5.1 EPSS 0.44%

   A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown function of the file /admin/add_account.php. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The explo...

4. CVE-2025-12593 code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

   Published 2025-11-02

   Medium·CVSS 5.1 EPSS 0.43%

   A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/edit_room.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be car...

5. CVE-2025-6578 code-projects Simple Online Hotel Reservation System delete_account.php sql injection

   Published 2025-06-24

   Medium·CVSS 6.9 EPSS 0.50%

   A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_account.php. The manipulation of the argument admin_id leads to sql injection. The attack can...

6. CVE-2025-6451 code-projects Simple Online Hotel Reservation System delete_pending.php sql injection

   Published 2025-06-22

   Medium·CVSS 6.9 EPSS 0.48%

   A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_pending.php. The manipulation of the argument transaction_id leads to sql injection. The atta...

7. CVE-2025-6450 code-projects Simple Online Hotel Reservation System confirm_reserve.php sql injection

   Published 2025-06-22

   Medium·CVSS 6.9 EPSS 0.48%

   A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirm_reserve.php. The manipulation of the argument transaction_id leads to sql injection. It is possible t...

8. CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection

   Published 2025-06-22

   Medium·CVSS 6.9 EPSS 0.48%

   A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkout_query.php. The manipulation of the argument transaction_id leads to sql injection. Th...

9. CVE-2025-6448 code-projects Simple Online Hotel Reservation System delete_room.php sql injection

   Published 2025-06-22

   Medium·CVSS 6.9 EPSS 0.48%

   A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_room.php. The manipulation of the argument room_id leads to sql injection. T...

10. CVE-2025-6447 code-projects Simple Online Hotel Reservation System index.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.48%

    A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the a...

11. CVE-2025-6421 code-projects Simple Online Hotel Reservation System add_account.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.55%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The attack m...

12. CVE-2025-6420 code-projects Simple Online Hotel Reservation System add_room.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.55%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add_room.php. The manipulation of the argument room_type leads to sql injection. The attack can be i...

13. CVE-2025-6419 code-projects Simple Online Hotel Reservation System edit_room.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.55%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit_room.php. The manipulation of the argument room_type leads to sql injection. It is possible to initiate...

14. CVE-2025-6418 code-projects Simple Online Hotel Reservation System edit_query_account.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.48%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The atta...

15. CVE-2025-6394 code-projects Simple Online Hotel Reservation System add_reserve.php sql injection

    Published 2025-06-21

    Medium·CVSS 6.9 EPSS 0.49%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_reserve.php. The manipulation of the argument firstname leads to sql injection. The...

16. CVE-2024-0504 code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting

    Published 2024-01-13

    Medium·CVSS 6.1 EPSS 0.56%

    A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file add_reserve.php of the component Make a Reservation Page. The manipulation of the argument Firstname/Lastn...

17. CVE-2024-0359 code-projects Simple Online Hotel Reservation System login.php sql injection

    Published 2024-01-10

    Critical·CVSS 9.8 EPSS 0.71%

    A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be ini...

18. CVE-2023-1561 code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload

    Published 2023-03-22

    Critical·CVSS 9.8 EPSS 0.77%

    A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.