Unknown · Simple Online Hotel Reservation System · CVE-2025-13170
**Name of the Vulnerable Software and Affected Versions**
Simple Online Hotel Reservation System version 1.0
**Description**
A flaw exists in the processing of the `/admin/edit account.php` file within the software. Manipulation of the `admin id` argument can lead to SQL injection. This issue is potentially exploitable remotely. The exploit is publicly available.
**Recommendations**
Apply any available updates or patches for version 1.0. As a temporary workaround, restrict access to the `/admin/edit account.php` file or carefully validate the `admin id` argument to prevent SQL injection.