EUVD-2025-18879Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Impact | While the CVSS 3.1 score of 7.3 indicates high severity (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), multiple factors elevate real-world risk: (1) Attack Vector is Network with no authentication required, indicating wide exposure; (2) Attack Complexity is Low, meaning exploitation requires minimal attacker sophistication; (3) Public disclosure and available POC code dramatically increase exploitation probability; (4) The vulnerability affects a hotel reservation system likely handling sensitive guest data (PII, payment information), making the impact assessment conservative—data breach potential is high. This is NOT a low-real-risk-high-CVSS scenario; the combination of exploitability, public POC, and sensitive data exposure makes this a critical priority regardless of the 7.3 CVSS score, which may underestimate business impact. |
| Exploit ScenarioDerived | An unauthenticated attacker discovers the /messageexec.php endpoint and crafts a malicious HTTP request with a SQL injection payload in the 'Name' parameter (e.g., Name=admin' OR '1'='1' UNION SELECT password FROM users--). Since PR:N (no privileges required) and AC:L (low complexity), the attacker can directly submit this request without authentication. The application processes the unsanitized input, concatenating it into an SQL query such as SELECT * FROM messages WHERE name='admin' OR '1'='1' UNION...', executing the injected SQL. The attacker extracts guest records, credentials, or payment data, or modifies bookings and pricing information. With public POC availability, script-kiddies and automated scanners are likely already targeting instances of this software. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 15, 2026
CVE-2025-6455 is a SQL injection vulnerability in code-projects Online Hotel Reservation System version 1.0, specifically in the /messageexec.php file where the 'Name' parameter is insufficiently sanitized. An unauthenticated remote attacker can exploit this to execute arbitrary SQL commands, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with exploit code available, indicating active exploitation risk.
RemediationAI
Immediate actions: (1) Apply parameterized queries (prepared statements) to the /messageexec.php file—replace string concatenation in SQL queries with placeholder-based parameterized queries in PHP (mysqli_prepare or PDO prepared statements); (2) Implement input validation on the 'Name' parameter using whitelist-based validation and type checking; (3) Apply principle of least privilege to database user credentials used by the application; (4) Deploy Web Application Firewall (WAF) rules to detect/block common SQL injection patterns in the Name parameter. Contact code-projects for vendor-provided patches; if unavailable, apply temporary access controls to /messageexec.php pending patch release. Monitor for active exploitation attempts in access logs.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in a web application parameter handling layer (CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component, commonly associated with SQL injection). The /messageexec.php endpoint accepts user-supplied input via the 'Name' parameter without proper input validation or parameterized query usage. This allows attackers to inject arbitrary SQL syntax into backend database queries. The affected product is a PHP-based hotel reservation management system running on typical LAMP/LEMP stacks. The root cause is insufficient input filtering before SQL query construction, a preventable weakness through prepared statements or input validation.
Know when Online Hotel Reservation System gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability classified as critical was found in code-projects Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /messageexec.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
A SQL injection vulnerability in the Online Hotel Reservation System allows unauthenticated remote attackers to compromise database integrity and potentially exfiltrate sensitive guest and payment data. With public exploits available and no patch currently available, this poses an immediate risk to operational continuity and customer trust if the affected system is internet-facing.
Implement Web Application Firewall (WAF) rules to filter SQL injection patterns in the Name parameter; restrict access to /messageexec.php via network segmentation or IP whitelisting; disable the affected messaging functionality if operationally feasible; enforce principle of least privilege on database accounts; enable database query logging and monitoring for anomalous SQL commands; consider running the application behind a reverse proxy with input sanitization.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
CVE-2025-6355 is a critical SQL injection vulnerability in SourceCodester Online Hotel Reservation System version 1.0, s
SQL injection in the login endpoint of Campcodes Online Hotel Reservation System 1.0 enables unauthenticated remote atta
CVE-2025-6458 is a critical SQL injection vulnerability in code-projects Online Hotel Reservation System version 1.0, af
CVE-2025-6457 is a critical SQL injection vulnerability in code-projects Online Hotel Reservation System 1.0 affecting t
CVE-2025-6456 is a critical SQL injection vulnerability in code-projects Online Hotel Reservation System 1.0, specifical
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Rated medium severity (CVSS 6.9),
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Rated medium sev
A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. Rated mediu
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Rated medium severity (CVSS 6.9), this vulnera
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Rated medium severity (CVSS 6.9), th
A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Rated medium severity (CVSS 6.9),
A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. Rated medium severity (CVSS 6.9),
Exploit-DB