| शीर्षक | code-projects Hotel And Tourism Reservation System 1.0 SQL Injection |
|---|
| विवरण | Multiple SQL injection vulnerabilities were discovered in details.php of the Hotel And Tourism Reservation System. The $_GET['room'] parameter is directly concatenated into SELECT and UPDATE queries without sanitization, and multiple $_POST parameters (fullname, in_date, out_date, phone, people, email) are concatenated into an INSERT query. These flaws allow any unauthenticated remote attacker to extract sensitive database information, modify reservation records, and potentially compromise the entire application backend. |
|---|
| स्रोत | ⚠️ https://github.com/khanfyhhfgfe-cmyk/ht-sql/blob/main/ht_sql.md |
|---|
| उपयोगकर्ता | 12139xxl (UID 98367) |
|---|
| सबमिशन | 19/05/2026 08:08 AM (5 महीनों पहले) |
|---|
| संयम | 05/06/2026 10:20 AM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 368883 [code-projects Hotel and Tourism Reservation System 1.0 /details.php room SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|