CNNVD-202510-914 Information

CNNVD ID

CNNVD-202510-914

Related CVE

CVE-2025-11404

• CNNVD Published: 2025-10-07

Description (Chinese)

SourceCodester Hotel and Lodge Management System是SourceCodester开源的一套酒店和旅馆管理系统。 SourceCodester Hotel and Lodge Management System 1.0版本存在SQL注入漏洞，该漏洞源于对文件/pages/save_tax.php中参数percentage的错误操作，可能导致SQL注入攻击。

Description (English)

ourceCodesterHotel and Lodge Management System is the open-source hotel and hotel management system ofourceCodester. SourceCodester Hotel and Lodge Management System Version 1.0 contains an injection loophole in SQL, which is the result of a mishandling of the parameter percentage in the document/pages/save tax.php, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

SourceCodester

Published

2025-10-07

Last Modified

2026-02-24

References

https://github.com/TThuyyy/cve1/issues/12 https://vuldb.com/?ctiid.327341 https://vuldb.com/?id.327341 https://vuldb.com/?submit.665113 https://www.sourcecodester.com/ https://access.redhat.com/security/cve/cve-2025-11404