CVE-2023-1561

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability.

• CWE-434

• https://github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdfBroken Link
• https://vuldb.com/?ctiid.223554Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223554Third Party Advisory
• https://github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdfBroken Link
• https://vuldb.com/?ctiid.223554Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223554Third Party Advisory

Published

Mar 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1555An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1556A vulnerability was found in SourceCodester Judging Manageme…9.8
• CVE-2023-1557A vulnerability was found in SourceCodester E-Commerce Syste…9.8
• CVE-2023-1558A vulnerability classified as critical has been found in Sim…9.8
• CVE-2023-1559A vulnerability classified as problematic was found in Sourc…7.2
• CVE-2023-1560A vulnerability, which was classified as problematic, has be…5.5
• CVE-2023-1562Mattermost fails to check the "Show Full Name" setting when …4.3
• CVE-2023-1563A vulnerability has been found in SourceCodester Student Stu…9.8
• CVE-2023-1564A vulnerability was found in SourceCodester Air Cargo Manage…9.8
• CVE-2023-1565A vulnerability was found in FeiFeiCMS 2.7.130201. It has be…5.4
• CVE-2023-1566A vulnerability was found in SourceCodester Medical Certific…9.8
• CVE-2023-1567A vulnerability was found in SourceCodester Student Study Ce…6.1