CVE-2025-12857 in Responsive Hotel Site

Riassunto

di MITRE • 07/11/2025

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 07/11/2025
• Moderazione: accettato
• Voce: VDB-331503
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00373
• KEV: no
• Attività: molto basso
• Settore: Hospital

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-12857
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-12857
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-12857/