CVE-2025-6448: code-projects Simple Online Hotel Reservation System delete_room.php sql injection
A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument roomid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6448?
CVE-2025-6448 is classified as critical due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-6448?
To fix CVE-2025-6448, sanitize and validate user inputs for the room_id parameter in the /admin/delete_room.php file.
What is the impact of CVE-2025-6448?
The impact of CVE-2025-6448 includes unauthorized access to the database, data leakage, and potentially complete control over the application.
Which versions of Simple Online Hotel Reservation System are affected by CVE-2025-6448?
CVE-2025-6448 affects version 1.0 of the Simple Online Hotel Reservation System.
Is CVE-2025-6448 easy to exploit?
Yes, CVE-2025-6448 can be easily exploited by an attacker through the manipulation of the room_id parameter.