CVE-2025-1965 - projectworlds Online Hotel Booking login.php sql injection

Back Back to CVE browser

MEDIUM

projectworlds Online Hotel Booking login.php sql injection

Published Mar 5, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.65%

Description

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Projectworlds Product Online Hotel Booking Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Projectworlds

Online Hotel Booking

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6088
Advisory
https://github.com/ubfbuz3/cve/issues/4
exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.298566
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.298566
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.511473
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6088		Advisory
https://github.com/ubfbuz3/cve/issues/4		exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.298566		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.298566		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.511473		third-party-advisoryThird Party AdvisoryVDB Entry