CVE-2025-8382: Campcodes Online Hotel Reservation System edit_room.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/editroom.php. The manipulation of the argument roomid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8382?
CVE-2025-8382 is classified as a critical severity vulnerability.
How does CVE-2025-8382 exploit the system?
CVE-2025-8382 exploits the system through SQL injection via the room_id argument in the /admin/edit_room.php file.
What software is affected by CVE-2025-8382?
CVE-2025-8382 affects the Campcodes Online Hotel Reservation System version 1.0.
How can I mitigate CVE-2025-8382?
Mitigation for CVE-2025-8382 involves sanitizing user inputs and implementing parameterized queries to prevent SQL injection.
Is CVE-2025-8382 remotely exploitable?
Yes, CVE-2025-8382 can be remotely exploited, making it particularly dangerous.