Description
uHotelBooking System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the system_page GET parameter. Attackers can send crafted requests to index.php with malicious system_page values using time-based blind SQL injection techniques to extract sensitive database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hotel-Booking-Script | uHotelBooking System | — | — |
References
- ExploitDB-46587 exploit
- VulnCheck Advisory: uHotelBooking System Lastest SQL Injection via system_page Parameter third-party-advisory