CVE-2025-9789 – SourceCodester Online Hotel Reservation System SQL Injection Vulnerability

CVE ID : CVE-2025-9789

Published : Sept. 1, 2025, 6:15 p.m. | 47 minutes ago

Description : A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…