CVE-2025-6355 in Online Hotel Reservation System

Riassunto

di MITRE • 20/06/2025

A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execeditroom.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: VulDB
• Divulgazione: 20/06/2025
• Moderazione: accettato
• Voce: VDB-313348
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00421
• KEV: no
• Attività: molto basso
• Settore: Hospital

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-6355
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-6355
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-6355/