CVE-2025-10789

published 2025-09-22

CVE-2025-10789: A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php…

medium 5.5 CVSS 4.0

AV N AC L AT N PR N UI N VC L VI L VA L SC N SI N SA N E P CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
fabian	online_hotel_reservation_system	—	—
sourcecodester	online_hotel_reservation_system	—	—

CWE-74 CWE-89