CVE-2023-1561: code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload

Published Mar 22, 2023

Updated

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file addroom.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Simple Online Hotel Reservation System Project Simple Online Hotel Reservation System=1.0

Fabian Simple Online Hotel Reservation System=1.0

Event History

Mar 22, 2023

CVE Published

12:00 PM

Data Sourced

12:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1561?

CVE-2023-1561 is classified as a critical vulnerability due to its potential for remote exploitation.

How does CVE-2023-1561 affect the Simple Online Hotel Reservation System?

CVE-2023-1561 affects the add_room.php file, allowing for unrestricted file uploads.

Can CVE-2023-1561 be exploited remotely?

Yes, CVE-2023-1561 can be exploited remotely by attackers, compromising system security.

What are the potential consequences of exploiting CVE-2023-1561?

Exploiting CVE-2023-1561 can lead to unauthorized file uploads, which may enable remote code execution and system compromise.

How can I mitigate the risks associated with CVE-2023-1561?

To mitigate CVE-2023-1561, it is recommended to apply security patches and implement file upload restrictions on the affected software.