PT-2025-45569 · Code Projects · Responsive Hotel Site

Hoya

·

CVE-2025-12913

·

Published

2025-11-08

·

Updated

2025-11-08

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0
Description A flaw exists in code-projects Responsive Hotel Site 1.0, specifically within the file /admin/roomdel.php. Manipulation of the ID argument can lead to SQL injection. This issue is potentially exploitable remotely. The exploit has been published. The vulnerable file is /admin/roomdel.php.
Recommendations Apply any available updates to address the SQL injection issue in the /admin/roomdel.php file. As a temporary workaround, restrict access to the /admin/roomdel.php file. Sanitize the ID argument before using it in SQL queries.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-12913

Affected Products

Responsive Hotel Site