SQL Injection Vulnerability in Simple Online Hotel Reservation System by Code-Projects

CVE-2025-6448

What is CVE-2025-6448?

A vulnerability has been identified in the Simple Online Hotel Reservation System version 1.0, specifically within the file /admin/delete_room.php. This security flaw allows for SQL injection via manipulation of the 'room_id' parameter, enabling attackers to execute arbitrary SQL queries. Exploitation of this vulnerability can be performed remotely, posing significant risks to data integrity and security. Details regarding this vulnerability have been made publicly available, increasing the urgency for users to implement protective measures.

References