CVE-2025-12855
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A security flaw was discovered in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/newsletterdel.php. Manipulating the eid argument enables remote attacks. The exploit has been released to the public and may be exploited.
Risk Assessment
An attacker can exploit the vulnerability to gain unauthorized access to the database, potentially leading to data confidentiality breach or corruption.
Recommendation
Use parameterized SQL queries or prepared statements. Also update the system and monitor logs.
Other vulnerabilities in Responsive Hotel Site
See all- CVE-2025-12913Medium
A flaw was found in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/roomdel.php. Manipulating the ID argument enables remote attacks. The exploit has been published and may be used.
- CVE-2025-12857Medium
A security vulnerability was detected in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/roombook.php. Manipulating the rid argument enables remote attacks. The exploit has been disclosed publicly and may be used.
- CVE-2025-12856Medium
A weakness was identified in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/reservation.php. Manipulating the email argument enables remote attacks. The exploit has been made available to the public and could be exploited.
Original NVD description (English source)
A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admin/newsletterdel.php. The manipulation of the argument eid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS