Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sourcecodester Hotel and Lodge Management System SQL注入漏洞
Vulnerability Description
Sourcecodester Hotel and Lodge Management System是一套酒店和旅馆管理系统。 Sourcecodester Hotel and Lodge Management System 2.0版本存在SQL注入漏洞，该漏洞源于软件对于SQL参数缺少有效的验证与转义。它允许未经身份验证的远程攻击者可利用该漏洞通过电子邮件参数执行任意SQL命令，并将其发送到客户、房间、货币、房间预订细节或税务细节的编辑页面。
CVSS Information
N/A
Vulnerability Type
N/A