itsourcecode Free Hotel Reservation System: SQL Injection Risk

Summary

The itsourcecode Free Hotel Reservation System version 1.0 has a security weakness that makes it possible for hackers to access sensitive data. This could happen if a hacker sends malicious data to the system, potentially leading to unauthorized access or data theft. We recommend updating to a fixed version of the software as soon as possible.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
itsourcecode	free_hotel_reservation_system	1.0	–

Original title

A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Perfor...

Original description

A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection