← CVE Intelligence

CVE-2025-7606

code-projects AVL Rooms city.php sql injection PUBLISHED

Description (CNA)

A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
code-projects / AVL Roomsaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.