漏洞描述 Code-Projects Responsive Hotel Site是Code-Projects开源的一个响应式酒店网站。 code-projects Responsive Hotel Site 1.0版本存在注入漏洞,该漏洞源于/admin/newsletter.php文件的eid参数包含一个SQL注入漏洞。
相关漏洞推荐 POC wp-advanced-responsive-video-embedder-fpd: WordPress Advanced Responsive Video Embedder - Full Path Disclosure ERPNext /api/method/erpnext.projects.doctype.timesheet.timesheet.get_timesheet_detail_rate SQL 注入漏洞(CVE-2025-52049) (CVE-2025-12593)code-projects Simple Online Hotel Reservation System 2.0 Photo Handler组件任意文件上传漏洞 (CVE-2025-8469)SourceCodester Online Hotel Reservation System 1.0 ID参数SQL注入漏洞 (CVE-2025-8470)SourceCodester Online Hotel Reservation System 1.0 SQL注入漏洞 (CVE-2025-8494)code-projects Intern Membership Management System 1.0 SQL注入漏洞 POC CVE-2018-14728: Responsive filemanager 9.13.1 Server-Side Request Forgery POC CVE-2018-15535: Responsive FileManager <9.13.4 - Local File Inclusion POC CVE-2018-8823: PrestaShop Responsive Mega Menu Module - Remote Code Execution POC CVE-2019-8937: HotelDruid 2.3.0 - Cross-Site Scripting POC CVE-2020-29047: WP Hotel Booking < 1.10.4 - PHP Object Injection POC CVE-2021-24947: WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read POC CVE-2021-37833: Hotel Druid 3.0.2 - Cross-Site Scripting