Vaibhavverma9999 Hotel Management System
7 CVEs affecting Vaibhavverma9999 Hotel Management System. Latest disclosed: 2024-08-20. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42558 | Critical | 9.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php. |
CVE-2024-42556 | Critical | 9.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php. |
CVE-2024-42557 | High | 8.8 | 2024-08-20 | A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. |
CVE-2024-42555 | High | 8.8 | 2024-08-20 | A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. |
CVE-2024-42554 | High | 8.8 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_added.php. |
CVE-2024-42553 | High | 8.8 | 2024-08-20 | A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. |
CVE-2024-42552 | High | 8.6 | 2024-08-20 | Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php. |