PT-2025-31502 · Unknown · Campcodes Online Hotel Reservation System
Xiaojiesecqwq
·
Published
2025-07-31
·
Updated
2025-07-31
·
CVE-2025-8378
Xiaojiesecqwq
·
Published
2025-07-31
·
Updated
2025-07-31
·
CVE-2025-8378
7.5
High
Base vector | Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Campcodes Online Hotel Reservation System version 1.0
Description:
A critical issue exists in Campcodes Online Hotel Reservation System 1.0, specifically within the Login component. The vulnerability is due to SQL injection, resulting from the manipulation of the `username/password` argument in the `/admin/index.php` file. This allows for remote exploitation. The exploit has been publicly disclosed.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Special Elements Injection
SQL injection