VulnerabilityAnalyzed
CVE-2025-10621
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0.
MEDIUM 5.5EPSS 0.48%
Does this matter?
Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
- CVSS 4.0
- 5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-89
- Affected
- fabian/hotel reservation system
- Source
- cna@vuldb.com
References
- https://github.com/aCas1o/cve_report/blob/main/report.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.324650Permissions Required, VDB Entry
- https://vuldb.com/?id.324650Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.650218Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
- https://github.com/aCas1o/cve_report/blob/main/report.mdExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.