SQL Injection Vulnerability in Campcodes Online Hotel Reservation System
CVE-2025-8382
What is CVE-2025-8382?
A vulnerability exists in the Campcodes Online Hotel Reservation System 1.0, specifically within the /admin/edit_room.php file. This security flaw arises from the improper handling of the 'room_id' argument, leading to SQL injection. Attackers can exploit this vulnerability remotely, allowing unauthorized access to the database and potential data manipulation. This issue has been made public, prompting immediate attention and patching by the vendor. For comprehensive details, refer to the technical descriptions provided in various security advisories.
Affected Version(s)
Online Hotel Reservation System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.