Hotel And Tourism Reservation In Php
Monthly
Unauthenticated remote download of a raw SQL database backup in code-projects Hotel and Tourism Reservation in PHP 1.0 exposes the full application database to any internet-connected attacker. The file /ht/hotel_db%20(1).sql is placed inside the web root without access restrictions, making it directly retrievable over HTTP with no credentials. A publicly available proof-of-concept exploit exists; the database dump likely contains guest PII, booking records, and potentially hashed or plaintext admin credentials.
Reflected cross-site scripting in code-projects Hotel and Tourism Reservation in PHP 1.0 allows unauthenticated remote attackers to inject arbitrary JavaScript via the `room` parameter in `/ht/details.php`. When a victim user follows a crafted URL, the unsanitized parameter is reflected directly into the HTML response, executing attacker-controlled script in the victim's browser context and enabling session hijacking or credential theft. A public proof-of-concept writeup exists on GitHub, though no active exploitation has been confirmed and no CISA KEV listing is present.
Unauthenticated remote download of a raw SQL database backup in code-projects Hotel and Tourism Reservation in PHP 1.0 exposes the full application database to any internet-connected attacker. The file /ht/hotel_db%20(1).sql is placed inside the web root without access restrictions, making it directly retrievable over HTTP with no credentials. A publicly available proof-of-concept exploit exists; the database dump likely contains guest PII, booking records, and potentially hashed or plaintext admin credentials.
Reflected cross-site scripting in code-projects Hotel and Tourism Reservation in PHP 1.0 allows unauthenticated remote attackers to inject arbitrary JavaScript via the `room` parameter in `/ht/details.php`. When a victim user follows a crafted URL, the unsanitized parameter is reflected directly into the HTML response, executing attacker-controlled script in the victim's browser context and enabling session hijacking or credential theft. A public proof-of-concept writeup exists on GitHub, though no active exploitation has been confirmed and no CISA KEV listing is present.