Hotel Management System Project

12 CVEs across 1 Hotel Management System Project products. Browse Hotel Management System Project vulnerabilities, severities, and proof-of-concept exploits.

Hotel Management System Project products with known CVEs

ProductCVEs
Hotel Management System12
Hotel Management System Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-25318High8.82024-02-09Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2.
CVE-2024-25316Critical9.82024-02-09Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2.
CVE-2024-25315Critical9.82024-02-09Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2.
CVE-2024-25314Critical9.82024-02-09Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.
CVE-2022-48091Medium5.42023-01-13Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php.
CVE-2022-48090Medium6.52023-01-13Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php.
CVE-2022-36254Medium5.42022-09-12Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary…
CVE-2022-2292Low3.52022-07-12A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/mas…
CVE-2022-2291Medium4.32022-07-12A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the fi…
CVE-2022-28110Critical9.82022-05-10Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page.
CVE-2022-27475Medium6.12022-04-13Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded.
CVE-2021-41651High7.52021-10-04A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information…