CVE-2025-14711

A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/navex2/CVE/issues/1Exploit, Issue Tracking, Mitigation, Third Party Advisory
• https://github.com/navex2/CVE/issues/2Exploit, Issue Tracking, Mitigation, Third Party Advisory
• https://vuldb.com/?ctiid.336428Permissions Required, VDB Entry
• https://vuldb.com/?id.336428Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.707083Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.707085Third Party Advisory, VDB Entry

Published

Dec 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14706A vulnerability was identified in Shiguangwu sgwbox N3 2.0.2…9.8
• CVE-2025-14707A security flaw has been discovered in Shiguangwu sgwbox N3 …9.8
• CVE-2025-14708A weakness has been identified in Shiguangwu sgwbox N3 2.0.2…7.5
• CVE-2025-14709A security vulnerability has been detected in Shiguangwu sgw…9.8
• CVE-2025-1471In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS ato…7.8
• CVE-2025-14710A vulnerability was detected in FantasticLBP Hotels Server u…9.8
• CVE-2025-14712Student Learning Assessment and Support System developed by …8.7
• CVE-2025-14713An Exposed Dangerous Method or Function vulnerability in Syn…7.5
• CVE-2025-14714An Authentication Bypass vulnerability existed where the app…6.5
• CVE-2025-14715Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-14716Improper Authentication vulnerability in Secomea GateManager…6.5
• CVE-2025-14718The Schedule Post Changes With PublishPress Future plugin fo…5.4