Online Hotel Reservation System EUVD-2025-18836

CVSS 7.3 (High) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L indicates network-accessible, low-complexity exploitation requiring no privileges or user interaction. All CVSS factors favor attacker ease. The public disclosure and availability of working exploit code (POC exists per description) significantly elevates real-world risk. While confidentiality, integrity, and availability impacts are rated 'Low' individually, the combination provides meaningful damage potential. This vulnerability should be classified as high priority for immediate remediation due to: (1) network accessibility without authentication, (2) confirmed public exploitation, (3) trivial attack complexity, (4) direct database compromise capability. SSVC analysis: exploitation is active/confirmed (public POC), the attack is automatable (SQL injection is easily scripted), and technical impact is high (complete database compromise possible). Estimated EPSS score likely ≥0.85 given public exploit availability.

An attacker discovers the publicly disclosed exploit for CVE-2025-6458 and crafts a malicious HTTP request to the hotel reservation system's admin panel. They target the /admin/execedituser.php endpoint with a payload such as: userid=1' UNION SELECT username, password FROM admin_users-- to extract administrator credentials. Since the application does not require authentication for this endpoint and the userid parameter is vulnerable, the SQL injection succeeds. The attacker retrieves admin credentials, logs into the admin panel, and gains full control over hotel reservations, customer data, and billing information. Alternatively, the attacker could execute UPDATE statements to modify reservation data or DELETE statements to cause data loss. The attack is trivial to automate and could be weaponized in mass exploitation campaigns targeting all Online Hotel Reservation System 1.0 instances exposed on the internet.