CVE-2025-6456: code-projects Online Hotel Reservation System order.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6456?
CVE-2025-6456 is classified as a critical vulnerability.
How does CVE-2025-6456 affect the Online Hotel Reservation System?
CVE-2025-6456 allows for SQL injection through the manipulation of the Start parameter in the file /reservation/order.php.
What software versions are vulnerable to CVE-2025-6456?
CVE-2025-6456 affects the Online Hotel Reservation System version 1.0.
How can I mitigate the risks associated with CVE-2025-6456?
To mitigate CVE-2025-6456, ensure proper input validation and use prepared statements for database queries.
Is CVE-2025-6456 actively being exploited?
While specific exploit reports may vary, critical vulnerabilities like CVE-2025-6456 are often targeted by attackers shortly after discovery.