Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:hotel_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductHotel Management System (b7ea87d9-d7f0-51d6-8fb5-94d9b0177696)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7506 vulnerable 2026-06-08 08:08:57.316054 SourceCodester Hotel Management System check sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the argument room_type leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-30T22:30:14.745Z
Updated: 2026-05-01T14:21:30.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2292 vulnerable 2026-06-08 05:43:35.206520 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "><script>alert("XSS")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-07-12T14:12:45.000Z
Updated: 2025-04-15T14:07:38.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2291 vulnerable 2026-06-08 05:43:35.205063 SourceCodester Hotel Management System Search search cross site scripting
MEDIUM (4.3)
A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input "><script>alert("XSS")</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-07-12T14:12:43.000Z
Updated: 2025-04-15T14:07:49.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.