Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_hotel_reservation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Hotel Reservation System (91ee60a2-d478-5ec2-abb4-600ed77b95bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9789 vulnerable 2026-06-08 07:47:09.829570 SourceCodester Online Hotel Reservation System edituser.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-09-01T18:02:07.145Z
Updated: 2025-09-02T15:09:15.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8470 vulnerable 2026-06-08 07:45:20.618584 SourceCodester Online Hotel Reservation System deleteroom.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/deleteroom.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-02T17:32:06.652Z
Updated: 2025-08-04T13:53:54.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8469 vulnerable 2026-06-08 07:45:20.617311 SourceCodester Online Hotel Reservation System deletegallery.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/deletegallery.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-02T17:02:06.047Z
Updated: 2025-08-04T15:14:52.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6355 vulnerable 2026-06-08 07:43:14.906743 SourceCodester Online Hotel Reservation System execeditroom.php sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execeditroom.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T17:00:10.035Z
Updated: 2025-06-23T15:29:20.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11055 vulnerable 2026-06-08 07:02:27.986509 SourceCodester Online Hotel Reservation System updateaddress.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2025-09-27T10:02:06.563Z
Updated: 2025-09-29T15:11:25.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10789 vulnerable 2026-06-08 07:02:27.515769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10788 vulnerable 2026-06-08 07:02:27.514161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10413 vulnerable 2026-06-08 06:23:46.468848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10411 vulnerable 2026-06-08 06:23:46.464612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10410 vulnerable 2026-06-08 06:23:46.462920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.