CVE-2025-10621: SourceCodester Hotel Reservation System editroomimage.php sql injection

Published Sep 17, 2025

Updated

A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

2 affected components

Sourcecodester Hotel Reservation System

Fabian Hotel Reservation System=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·10:02 PM

Data Sourced

via MITRE·10:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 4, 58705

Event

via NVD·02:09 AM

Frequently Asked Questions

What is the severity of CVE-2025-10621?

CVE-2025-10621 is classified as a critical severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-10621?

To fix CVE-2025-10621, sanitize and validate input in the editroomimage.php file to prevent SQL injection.

What type of vulnerability is CVE-2025-10621?

CVE-2025-10621 is an SQL injection vulnerability that allows attackers to manipulate database queries.

Can CVE-2025-10621 be exploited remotely?

Yes, CVE-2025-10621 can be exploited remotely, allowing attackers to execute SQL commands on the affected system.

Which software is affected by CVE-2025-10621?

CVE-2025-10621 affects SourceCodester Hotel Reservation System version 1.0.