Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_hotel_reservation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Hotel Reservation System (84aa2879-7abd-5413-846d-8824c655d67e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6458 vulnerable 2026-06-08 07:43:15.095433 code-projects Online Hotel Reservation System execedituser.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execedituser.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T04:31:06.736Z
Updated: 2025-06-23T14:32:42.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6457 vulnerable 2026-06-08 07:43:15.094785 code-projects Online Hotel Reservation System demo.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in code-projects Online Hotel Reservation System 1.0. This affects an unknown part of the file /reservation/demo.php. The manipulation of the argument Start leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T04:00:06.384Z
Updated: 2025-06-23T14:33:22.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6456 vulnerable 2026-06-08 07:43:15.094374 code-projects Online Hotel Reservation System order.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T03:31:08.757Z
Updated: 2025-06-23T14:34:10.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6455 vulnerable 2026-06-08 07:43:15.093792 code-projects Online Hotel Reservation System messageexec.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /messageexec.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T03:00:12.788Z
Updated: 2025-06-23T14:48:47.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11354 vulnerable 2026-06-08 07:02:28.629922 code-projects Online Hotel Reservation System addslideexec.php unrestricted upload
MEDIUM (6.3)
A flaw has been found in code-projects Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/addslideexec.php. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2025-10-07T06:02:06.416Z
Updated: 2025-10-07T18:10:57.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11353 vulnerable 2026-06-08 07:02:28.629546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11352 vulnerable 2026-06-08 07:02:28.629059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11351 vulnerable 2026-06-08 07:02:28.628491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.