What is CVE-2019-18387?

CVE-2019-18387 is a critical-severity vulnerability in Hotel And Lodge Management System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2019-10-23.

How severe is CVE-2019-18387?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Hotel And Lodge Management System Project

CVE-2019-18387

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.

Vulnerability class: SQL Injection

EPSS: 0.014 (69.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hotel_and_lodge_management_system_project Hotel_and_lodge_management_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-18387?: CVE-2019-18387 is a critical-severity vulnerability in Hotel And Lodge Management System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2019-10-23.
How severe is CVE-2019-18387?: Critical severity. CVSS v3 base score is 9.8 out of 10.