Vulnerability Description
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_customer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nikhil-Bhalerao | Hotel And Lodge Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/TThuyyy/cve1/issues/8ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.327587Permissions RequiredVDB Entry
- https://vuldb.com/?id.327587Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.665461Third Party AdvisoryVDB Entry
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2025-11469?
CVE-2025-11469 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_customer.php. Executing manipulation of the ...
How severe is CVE-2025-11469?
CVE-2025-11469 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-11469?
Check the references section above for vendor advisories and patch information. Affected products include: Nikhil-Bhalerao Hotel And Lodge Management System.