CVE-2025-6420: code-projects Simple Online Hotel Reservation System add_room.php sql injection
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addroom.php. The manipulation of the argument roomtype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6420?
CVE-2025-6420 is classified as a critical vulnerability.
How does CVE-2025-6420 affect the system?
CVE-2025-6420 allows for SQL injection through manipulation of the room_type argument in the /admin/add_room.php file.
What software is affected by CVE-2025-6420?
CVE-2025-6420 affects the Simple Online Hotel Reservation System by code-projects.
How do I fix CVE-2025-6420?
To fix CVE-2025-6420, validate and sanitize user inputs on the room_type argument to prevent SQL injection.
What type of attack is possible due to CVE-2025-6420?
CVE-2025-6420 allows an attacker to perform SQL injection attacks, compromising the database.