Code Projects · Hospital Management System · CVE-2025-10799
**Name of the Vulnerable Software and Affected Versions**
Hostel Management System version 1.0
**Description**
A SQL injection flaw exists in the file '/justines/admin/mod reservation/index.php?view=view'. Manipulation of the `ID` argument allows for remote exploitation. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing unauthorized access to or modification of the database.
**Recommendations**
Restrict access to the '/justines/admin/mod reservation/index.php?view=view' file or avoid using the `ID` parameter until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.