PT-2025-31740 · Sourcecodester · Sourcecodester Online Hotel Reservation System

K1Nako · Publicado 2025-08-02 · Atualizado 2025-08-07 · CVE-2025-8469

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Online Hotel Reservation System version 1.0

Description A critical vulnerability exists in SourceCodester Online Hotel Reservation System 1.0. The issue affects an unknown part of the file /admin/deletegallery.php and allows for SQL injection through manipulation of the ID argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Recommendations For SourceCodester Online Hotel Reservation System version 1.0, sanitize or validate the ID parameter in the /admin/deletegallery.php file to prevent SQL injection. As a temporary workaround, restrict access to the /admin/deletegallery.php file.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2025-8469

Produtos afetados

Sourcecodester Online Hotel Reservation System

Referências · 13

• 🔥 https://github.com/K1nakoo/tmp01/blob/main/tmp01.md · Exploit
• https://twitter.com/VulmonFeeds/status/1951698251180101729 · Publicação no Twitter
• https://t.me/CVEtracker/29020 · Publicação no Telegram
• https://sourcecodester.com · Nota
• https://vuldb.com/?id.318519 · Nota
• https://osv.dev/vulnerability/CVE-2025-8469 · Aviso do Fabricante
• https://t.me/cveNotify/130674 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1951698589991780704 · Publicação no Twitter
• https://twitter.com/cracbot/status/1953410851500597364 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-8469 · Nota de Segurança
• https://vuldb.com/?ctiid.318519 · Nota
• https://vuldb.com/?submit.626017 · Nota
• https://t.me/cveNotify/130802 · Publicação no Telegram