Vulnerability Description
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fabian | Online Hotel Reservation System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/xingrenlvke/cve/issues/10ExploitIssue Tracking
- https://vuldb.com/?ctiid.325205Permissions RequiredVDB Entry
- https://vuldb.com/?id.325205Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.657389Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-10843?
CVE-2025-10843 is a vulnerability with a CVSS score of 7.3 (HIGH). A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation o...
How severe is CVE-2025-10843?
CVE-2025-10843 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-10843?
Check the references section above for vendor advisories and patch information. Affected products include: Fabian Online Hotel Reservation System.