medium6.3
CVE-2025-11405
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0.
Impact
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /del_tax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nikhil-Bhalerao | Hotel And Lodge Management System | Version 1.0 |