Vulnerabilidades do Fabian Online Hotel Reservation System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fabian Online Hotel Reservation System: 6 registro(s), com versões afetadas e correções.cpe:2.3:a:fabian:online_hotel_reservation_system
CVE-2025-11354
Crítica · 9.8
CWE-434 07/10/2025
code-projects Online Hotel Reservation System addslideexec.php unrestricted upload
A flaw has been found in code-projects Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/addslideexec.php. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.
CVE-2025-11353
Alta · 8.8
CWE-284 07/10/2025
code-projects Online Hotel Reservation System addgalleryexec.php unrestricted upload
A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of the file /admin/addgalleryexec.php. Performing manipulation of the argument image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2025-11352
Alta · 8.8
CWE-284 07/10/2025
code-projects Online Hotel Reservation System addexec.php unrestricted upload
A security vulnerability has been detected in code-projects Online Hotel Reservation System 1.0. This affects an unknown function of the file /admin/addexec.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11351
Alta · 8.8
CWE-284 07/10/2025
code-projects Online Hotel Reservation System editpicexec.php unrestricted upload
A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVE-2025-11055
Crítica · 9.8
CWE-74 27/09/2025
SourceCodester Online Hotel Reservation System updateaddress.php sql injection
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
CVE-2025-10843
Crítica · 9.8
CWE-74 23/09/2025
Reservation Online Hotel Reservation System paypalpayout.php sql injection
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.