CVE-2017-20124: Online Hotel Booking System Pro Plugin roomtype-details.php sql injection

Published Jun 30, 2022

Updated

A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

bestsoftinc Online Hotel Booking System Wordpress=1.0

Event History

Jun 30, 2022

CVE Published

via MITRE·05:05 AM

Data Sourced

via MITRE·05:05 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-20124?

CVE-2017-20124 is classified as a critical vulnerability.

How do I fix CVE-2017-20124?

To fix CVE-2017-20124, update the Online Hotel Booking System Pro Plugin to a version that mitigates the SQL injection vulnerability.

What type of attack is associated with CVE-2017-20124?

CVE-2017-20124 is associated with a SQL injection attack that can be performed remotely.

Which component is affected by CVE-2017-20124?

The vulnerability affects the function located in the file /front/roomtype-details.php of the Online Hotel Booking System Pro Plugin.

What are the potential risks of CVE-2017-20124?

The potential risks include unauthorized database access, data manipulation, and compromise of the website's integrity.