CVE-2025-9790: SourceCodester Hotel Reservation System updateabout.php sql injection
A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9790?
CVE-2025-9790 has been classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9790?
To fix CVE-2025-9790, ensure that the input to the 'address' parameter in /admin/updateabout.php is properly sanitized and use prepared statements for all SQL queries.
Which software is affected by CVE-2025-9790?
CVE-2025-9790 affects SourceCodester Hotel Reservation System version 1.0.
Can CVE-2025-9790 be exploited remotely?
Yes, CVE-2025-9790 can be exploited remotely due to the nature of the SQL injection vulnerability.
What type of vulnerability is CVE-2025-9790?
CVE-2025-9790 is classified as an SQL injection vulnerability affecting the Hotel Reservation System.