CVE-2025-12855: code-projects Responsive Hotel Site newsletterdel.php sql injection

Published Nov 7, 2025

Updated

A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admin/newsletterdel.php. The manipulation of the argument eid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Responsive Hotel Site

Fabian Responsive Hotel Site=1.0

Event History

Nov 7, 2025

CVE Published

via MITRE·01:32 PM

Data Sourced

via MITRE·01:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 12, 58737

Event

via NVD·07:30 PM

Frequently Asked Questions

What is the severity of CVE-2025-12855?

CVE-2025-12855 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-12855?

To fix CVE-2025-12855, sanitize and validate input parameters in the /admin/newsletterdel.php file to prevent SQL injection.

What software is affected by CVE-2025-12855?

CVE-2025-12855 affects the Code-projects Responsive Hotel Site version 1.0.

Can CVE-2025-12855 be exploited remotely?

Yes, CVE-2025-12855 can be exploited remotely, allowing attackers to perform SQL injection.

What impact does CVE-2025-12855 have on data security?

CVE-2025-12855 can lead to unauthorized access to the database, potentially compromising sensitive user data.