Sourcecodester · Hotel/Lodge Management System · CVE-2025-11397
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Hotel and Lodge Management System version 1.0
**Description**
A security flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves SQL injection, potentially initiated remotely, through manipulation of the `email` argument in an unknown function within the /login.php file. The exploit has been publicly released.
**Recommendations**
Apply any available updates or patches for SourceCodester Hotel and Lodge Management System version 1.0.
As a temporary workaround, restrict access to the /login.php file.
Sanitize the `email` input parameter to prevent SQL injection attacks.