CVE-2025-6418: code-projects Simple Online Hotel Reservation System edit_query_account.php sql injection
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6418?
CVE-2025-6418 is classified as a critical vulnerability.
How does CVE-2025-6418 affect the Simple Online Hotel Reservation System?
CVE-2025-6418 affects the /admin/edit_query_account.php file through SQL injection vulnerabilities.
What is the impact of exploiting CVE-2025-6418?
Exploiting CVE-2025-6418 can allow an attacker to manipulate database queries and potentially access sensitive data.
How do I fix CVE-2025-6418?
To fix CVE-2025-6418, ensure proper input validation and use prepared statements to prevent SQL injection.
Who is affected by CVE-2025-6418?
Users of the Simple Online Hotel Reservation System version 1.0 are affected by CVE-2025-6418.