SQL Injection Vulnerability in Hotel/admin/roombook.php
CVE-2024-25315
9.8CRITICAL
What is CVE-2024-25315?
The Hotel Management System version 1.0 developed by Code-projects contains a vulnerability that enables SQL Injection through the 'rid' parameter in the script located at Hotel/admin/roombook.php. This vulnerability could be exploited by attackers to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive information stored in the database. Proper input validation and parameterized queries are necessary to mitigate the risk associated with this vulnerability.