5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/save_room.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Basic Information
ID
CVE-2025-11399
Source
VulDB
Published
Oct 7, 2025 at 15:32
Affected Product
Vendor
SourceCodester
Product
Hotel and Lodge Management System
Version
1.0
Affected Versions
SourceCodester Hotel and Lodge Management System 1.0