CVE-2025-12913 — Injection in Responsive Hotel Site

CWE-74 — InjectionCWE-89 — SQL Injection3 documents3 sources
Severity
5.1MEDIUMNVD
EPSS
0.0%
top 95.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Responsive Hotel SiteFabian Responsive Hotel Site
Timeline
PublishedNov 8

Description

A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-p3wh-73vj-58h9: A flaw has been found in code-projects Responsive Hotel Site 1↗2025-11-08
▶
CVEList
code-projects Responsive Hotel Site roomdel.php sql injection↗2025-11-08
▶
CVE-2025-12913 — Injection in Responsive Hotel Site | cvebase