CVE-2025-6449: code-projects Simple Online Hotel Reservation System checkout_query.php sql injection
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6449?
CVE-2025-6449 is classified as a critical vulnerability.
Which software is affected by CVE-2025-6449?
CVE-2025-6449 affects the Code-projects Simple Online Hotel Reservation System version 1.0.
What type of vulnerability is CVE-2025-6449?
CVE-2025-6449 is an SQL injection vulnerability.
How does CVE-2025-6449 occur?
CVE-2025-6449 occurs due to improper handling of the transaction_id argument in the /admin/checkout_query.php file.
How can I mitigate CVE-2025-6449?
To mitigate CVE-2025-6449, ensure that your code validates and sanitizes user inputs to prevent SQL injection.