5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of the file /admin/addgalleryexec.php. Performing manipulation of the argument image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Basic Information
ID
CVE-2025-11353
Source
VulDB
Published
Oct 7, 2025 at 05:32
Affected Product
Vendor
code-projects
Product
Online Hotel Reservation System
Version
1.0
Affected Versions
code-projects Online Hotel Reservation System 1.0