CVE-2025-12857: code-projects Responsive Hotel Site roombook.php sql injection

Published Nov 7, 2025

Updated

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects Responsive Hotel Site

Fabian Responsive Hotel Site=1.0

Event History

Nov 7, 2025

CVE Published

via MITRE·02:02 PM

Data Sourced

via MITRE·02:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12857?

CVE-2025-12857 has been classified as a high-severity SQL injection vulnerability.

How do I fix CVE-2025-12857?

To fix CVE-2025-12857, sanitize user inputs in the 'rid' parameter of the /admin/roombook.php file to prevent SQL injection.

Can CVE-2025-12857 be exploited remotely?

Yes, CVE-2025-12857 can be exploited remotely, allowing attackers to execute SQL injection attacks from outside the affected system.

What software is affected by CVE-2025-12857?

CVE-2025-12857 affects version 1.0 of the code-projects Responsive Hotel Site application.

What are the potential consequences of CVE-2025-12857 exploitation?

Exploitation of CVE-2025-12857 can lead to unauthorized access to the database and manipulation of sensitive information.