VulnerabilityAnalyzed
CVE-2025-10788
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0.
MEDIUM 5.5EPSS 0.48%
Does this matter?
Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
- CVSS 4.0
- 5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-89
- Affected
- fabian/online hotel reservation system
- Source
- cna@vuldb.com
References
- https://github.com/peri0d/my_cve/blob/main/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteroominventory.php-sql-injection.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.325145Permissions Required, VDB Entry
- https://vuldb.com/?id.325145Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.653877Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
- https://github.com/peri0d/my_cve/blob/main/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteroominventory.php-sql-injection.mdExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.