Sourcecodester Hotel Management System vulnerabilities

CVE-2026-7506 [HIGH] CWE-74 CVE-2026-7506: A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknow A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the argument room_type leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2022-2292 [MEDIUM] CWE-79 CVE-2022-2292: A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2 A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input ">alert("XSS") leads to cross site scripting. It is possible to launch the att

CVE-2022-2291 [MEDIUM] CWE-79 CVE-2022-2291: A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as proble A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input ">alert("XSS") leads to cross site scripting. The attack may be initiated remotely. The exploit h