CVE-2025-6418

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://code-projects.org/Product
• https://github.com/zzb1388/cve/issues/4Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.313412Permissions Required, VDB Entry
• https://vuldb.com/?id.313412Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.598243Third Party Advisory, VDB Entry
• https://github.com/zzb1388/cve/issues/4Exploit, Issue Tracking, Third Party Advisory

Published

Jun 21, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64174Magento-lts is a long-term support alternative to Magento Co…4.8
• CVE-2025-64175Gogs is an open source self-hosted Git service. In version 0…8.8
• CVE-2025-64176ThinkDashboard is a self-hosted bookmark dashboard built wit…6.1
• CVE-2025-64177ThinkDashboard is a self-hosted bookmark dashboard built wit…6.1
• CVE-2025-64178Jellysweep is a cleanup tool for the Jellyfin media server. …8.9
• CVE-2025-64179lakeFS is an open-source tool that transforms object storage…5.3
• CVE-2025-64180Manager-io/Manager is accounting software. In Manager Deskto…10
• CVE-2025-64181OpenEXR provides the specification and reference implementat…7.5
• CVE-2025-64182OpenEXR provides the specification and reference implementat…7.8
• CVE-2025-64183OpenEXR provides the specification and reference implementat…7.5
• CVE-2025-64184Dosage is a comic strip downloader and archiver. When downlo…8.8
• CVE-2025-64185Open OnDemand is an open-source HPC portal. Prior to version…6.9