12139Xxl

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation System version 1.0 **Description** An issue exists in the `/details.php` file where improper handling of the `room` argument allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate or access the database. **Recommendations** Update code-projects Hotel and Tourism Reservation System to a version newer than 1.0. As a temporary workaround, restrict access to the `/details.php` endpoint or avoid using the `room` parameter until a patch is applied.