Approved changes feed: RSS · Atom

cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorFabian (fbf7922e-b691-5c28-8717-83ed5e15ae54)
ProductSimple Online Hotel Reservation System (d7437393-73f1-5aba-a8cd-c1afc5143a54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6578 vulnerable 2026-06-03 15:12:28.111232 code-projects Simple Online Hotel Reservation System delete_account.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_account.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-24T20:00:12.898Z
Updated: 2025-06-24T20:42:13.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6451 vulnerable 2026-06-03 15:12:27.627888 code-projects Simple Online Hotel Reservation System delete_pending.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_pending.php. The manipulation of the argument transaction_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Published: 2025-06-22T01:31:05.166Z
Updated: 2025-06-23T19:26:44.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6450 vulnerable 2026-06-03 15:12:27.627492 code-projects Simple Online Hotel Reservation System confirm_reserve.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirm_reserve.php. The manipulation of the argument transaction_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T01:00:21.497Z
Updated: 2025-06-23T19:26:49.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6449 vulnerable 2026-06-03 15:12:27.626998 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkout_query.php. The manipulation of the argument transaction_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T00:31:05.205Z
Updated: 2025-06-23T19:26:55.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6448 vulnerable 2026-06-03 15:12:27.626479 code-projects Simple Online Hotel Reservation System delete_room.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_room.php. The manipulation of the argument room_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T00:00:16.309Z
Updated: 2025-06-23T19:27:00.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6447 vulnerable 2026-06-03 15:12:27.626038 code-projects Simple Online Hotel Reservation System index.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T23:31:06.691Z
Updated: 2025-06-23T19:27:07.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6421 vulnerable 2026-06-03 15:12:27.568925 code-projects Simple Online Hotel Reservation System add_account.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T22:00:11.938Z
Updated: 2025-06-23T14:53:12.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6420 vulnerable 2026-06-03 15:12:27.568430 code-projects Simple Online Hotel Reservation System add_room.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add_room.php. The manipulation of the argument room_type leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T21:31:06.860Z
Updated: 2025-06-23T14:58:58.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6419 vulnerable 2026-06-03 15:12:27.567865 code-projects Simple Online Hotel Reservation System edit_room.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit_room.php. The manipulation of the argument room_type leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T21:00:16.624Z
Updated: 2025-06-23T14:34:47.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6418 vulnerable 2026-06-03 15:12:27.567460 code-projects Simple Online Hotel Reservation System edit_query_account.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-21T20:31:06.728Z
Updated: 2025-06-23T14:35:25.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6394 vulnerable 2026-06-03 15:12:27.531496 code-projects Simple Online Hotel Reservation System add_reserve.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_reserve.php. The manipulation of the argument firstname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-21T01:31:05.097Z
Updated: 2025-06-23T14:42:47.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60308 vulnerable 2026-06-03 15:07:56.024176 Details available
code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information
Published: 2025-10-10T00:00:00.000Z
Updated: 2025-10-10T17:47:27.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13170 vulnerable 2026-06-03 14:58:45.644730 code-projects Simple Online Hotel Reservation System edit_account.php sql injection
HIGH (7.3)
A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_account.php. Performing a manipulation of the argument admin_id results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2025-11-14T16:02:05.326Z
Updated: 2026-02-24T06:27:29.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13169 vulnerable 2026-06-03 14:58:45.644167 code-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /add_query_reserve.php. Such manipulation of the argument room_id leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-14T15:32:07.714Z
Updated: 2026-02-24T06:27:18.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0504 vulnerable 2026-06-03 14:54:02.857753 code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting
LOW (3.5)
A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file add_reserve.php of the component Make a Reservation Page. The manipulation of the argument Firstname/Lastname with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250618 is the identifier assigned to this vulnerability.
Published: 2024-01-13T21:00:06.032Z
Updated: 2025-06-03T14:02:20.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1561 vulnerable 2026-06-03 14:48:55.748321 code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability.
Published: 2023-03-22T12:00:04.562Z
Updated: 2024-08-02T05:49:11.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.