Code Projects · Responsive Hotel Site · CVE-2025-12913
**Name of the Vulnerable Software and Affected Versions**
code-projects Responsive Hotel Site version 1.0
**Description**
A flaw exists in code-projects Responsive Hotel Site 1.0, specifically within the file `/admin/roomdel.php`. Manipulation of the `ID` argument can lead to SQL injection. This issue is potentially exploitable remotely. The exploit has been published. The vulnerable file is `/admin/roomdel.php`.
**Recommendations**
Apply any available updates to address the SQL injection issue in the `/admin/roomdel.php` file.
As a temporary workaround, restrict access to the `/admin/roomdel.php` file.
Sanitize the `ID` argument before using it in SQL queries.