7.3HIGH

CVE-2025-10621 — A vulnerability was determined in SourceCodester Hotel Reservation System 1.0.

Fabian · Hotel Reservation System · Published 17 Sept 2025 · Modified 26 Sept 2026

Description

A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

References

https://github.com/aCas1o/cve_report/blob/main/report.md
https://vuldb.com/?ctiid.324650
https://vuldb.com/?id.324650
https://vuldb.com/?submit.650218
https://www.sourcecodester.com/
https://github.com/aCas1o/cve_report/blob/main/report.md

What to do

Check whether Hotel Reservation System is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-10621