medium6.5
CVE-2015-4713
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
Impact
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apphp | Hotel Site | Versions 3.0.9, 3.1.3, 3.2.4, 3.3.0, 3.4.4, 3.5.1 |