Hotel Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:tushar-2223:hotel-management-system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tushar 2223 (d9204712-c475-5139-96de-43e5ec63b72e) |
|---|---|
| Product | Hotel Management System (7c579866-bf35-5396-9b1f-52e7f9eacff9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2553 |
vulnerable | 2026-06-08 07:55:17.210503 |
tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-16T11:32:06.780Z
Updated: 2026-02-23T10:09:02.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14207 |
vulnerable | 2026-06-08 07:06:33.861527 |
tushar-2223 Hotel-Management-System invoiceprint.php sql injection
HIGH (7.3)
A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element is an unknown function of the file /admin/invoiceprint.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Published: 2025-12-08T00:32:06.521Z
Updated: 2025-12-08T15:53:12.836Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.