CVE-2017-20125 — Online Hotel Booking System Pro roomtype-details.php sql injection

CVE-2017-20125

Online Hotel Booking System Pro roomtype-details.php sql injection PUBLISHED

Description (CNA)

A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / product	Versions
unspecified / Online Hotel Booking System Pro	affected 1.2

CWE

CWE-89

References

https://www.exploit-db.com/exploits/41181/
https://vuldb.com/?id.96625

ADP enrichment

CVE

No English description supplied.

https://www.exploit-db.com/exploits/41181/
https://vuldb.com/?id.96625

CISA-ADP

No English description supplied.

No references supplied.