PT-2025-31503 · Unknown · Campcodes Online Hotel Reservation System
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Campcodes Online Hotel Reservation System version 1.0
Description
A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0, affecting an unknown part of the file
/admin/edit room.php. Manipulation of the photo argument leads to unrestricted file upload, and the attack can be initiated remotely. The exploit has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/admin/edit room.php file to minimize the risk of exploitation.Exploit
Fix
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Campcodes Online Hotel Reservation System