CVE-2025-12594: code-projects Simple Online Hotel Reservation System add_account.php sql injection
A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown function of the file /admin/addaccount.php. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12594?
CVE-2025-12594 is classified as a critical vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-12594?
To fix CVE-2025-12594, sanitize and parameterize input fields to prevent SQL injection, particularly in the add_account.php file.
What is affected by CVE-2025-12594?
CVE-2025-12594 affects version 2.0 of the Simple Online Hotel Reservation System developed by code-projects.
Can CVE-2025-12594 be exploited remotely?
Yes, CVE-2025-12594 can be exploited remotely by manipulating the 'Name' argument during an attack.
What kind of vulnerability is CVE-2025-12594?
CVE-2025-12594 is a SQL injection vulnerability that allows an attacker to manipulate database queries.