CVE-2025-13169: code-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection
A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /addqueryreserve.php. Such manipulation of the argument roomid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13169?
CVE-2025-13169 has been categorized as a high severity vulnerability due to its potential for SQL injection which can be exploited remotely.
How do I fix CVE-2025-13169?
To fix CVE-2025-13169, input validation and prepared statements should be implemented to prevent SQL injection in the affected /add_query_reserve.php file.
Which software is affected by CVE-2025-13169?
CVE-2025-13169 affects the Simple Online Hotel Reservation System version 1.0 developed by Code-projects.
Can CVE-2025-13169 be exploited remotely?
Yes, CVE-2025-13169 can be exploited remotely through SQL injection due to improper handling of the room_id parameter.
What type of vulnerability is CVE-2025-13169?
CVE-2025-13169 is classified as an SQL injection vulnerability.