CVE-2025-1962: projectworlds Online Hotel Booking addroom.php sql injection
First published: Tue Mar 04 2025(Updated: )
A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an unknown part of the file /admin/addroom.php. The manipulation of the argument roomname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Projectworlds Online Hotel Booking | ||
| Projectworlds Online Hotel Booking | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1962?
CVE-2025-1962 has been classified as a critical vulnerability.
What vulnerability is associated with CVE-2025-1962?
CVE-2025-1962 is associated with an SQL injection vulnerability in the module /admin/addroom.php of Projectworlds Online Hotel Booking 1.0.
What can be exploited in CVE-2025-1962?
The vulnerability can be exploited by manipulating the 'roomname' argument, leading to SQL injection attacks.
Is CVE-2025-1962 remotely exploitable?
Yes, CVE-2025-1962 can be initiated remotely, allowing attackers to exploit the vulnerability from anywhere.
How do I fix CVE-2025-1962?
To fix CVE-2025-1962, ensure proper input validation and sanitization for the 'roomname' parameter in the affected file.
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/references
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/author
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/event
- vendor/projectworlds
- canonical/projectworlds online hotel booking
- version/projectworlds online hotel booking/1.0