CNNVD-202510-928 Information

CNNVD ID

CNNVD-202510-928

Related CVE

CVE-2025-11401

• CNNVD Published: 2025-10-07

Description (Chinese)

SourceCodester Hotel and Lodge Management System是SourceCodester开源的一套酒店和旅馆管理系统。 SourceCodester Hotel and Lodge Management System 1.0版本存在SQL注入漏洞，该漏洞源于对文件/pages/save_curr.php中参数currcode的错误操作，可能导致SQL注入攻击。

Description (English)

ourceCodesterHotel and Lodge Management System is the open-source hotel and hotel management system ofourceCodester. The sourceCodester Hotel and Lodge Management System Version 1.0 contains an injection loophole in SQL, which is the result of a mishandling of the parameters curricode in the document/pages/save curr.php, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

SourceCodester

Published

2025-10-07

Last Modified

2026-02-24

References

https://github.com/TThuyyy/cve1/issues/9 https://vuldb.com/?ctiid.327338 https://vuldb.com/?id.327338 https://vuldb.com/?submit.665094 https://www.sourcecodester.com/ https://access.redhat.com/security/cve/cve-2025-11401