NetSight
critical9.8

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter.

Impact

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter.

Affected products

VendorProductAffected versions
Hotels Server ProjectHotels Server
Version 1.0

Weakness classification

References