CVE-2021-41651 | Severity.io

Description

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in process_update_profile.php.

Related CPE's

hotel_management_system_project

hotel_management_system

Vulnerable

References

https://github.com/MobiusBinary/CVE-2021-41651/

ExploitThird Party Advisory

https://github.com/tramyardg/hotel-mgmt-system

ProductThird Party Advisory

https://github.com/MobiusBinary/CVE-2021-41651/

ExploitThird Party Advisory

https://github.com/tramyardg/hotel-mgmt-system