← back
CVE-2025-10789

SourceCodester Online Hotel Reservation System deleteslide.php sql injection

CVSS 6.9 MEDIUMEPSS 0.4%CWE-74CWE-89
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Online Hotel Reservation System

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gold-textbook-8ff.notion.site/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteslide-php-sql-injection-26d85e97f353807585d7e600b31d339ehttps://vuldb.com/?ctiid.325146https://vuldb.com/?id.325146https://vuldb.com/?submit.653881https://www.sourcecodester.com/