CVE-2025-9789: SourceCodester Online Hotel Reservation System edituser.php sql injection
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9789?
CVE-2025-9789 has been classified with a high severity due to its potential for remote SQL injection exploitation.
How do I fix CVE-2025-9789?
To fix CVE-2025-9789, ensure that proper input validation and parameterized queries are implemented in the /admin/edituser.php file.
What type of vulnerability is CVE-2025-9789?
CVE-2025-9789 is a SQL injection vulnerability that affects the SourceCodester Online Hotel Reservation System.
Can CVE-2025-9789 be exploited remotely?
Yes, CVE-2025-9789 can be exploited remotely by manipulating the userid argument in the affected PHP file.
Which version of the software is affected by CVE-2025-9789?
CVE-2025-9789 affects version 1.0 of the SourceCodester Online Hotel Reservation System.