Fiche vulnérabilité
CVE-2025-11479 : faille critique janobe wedding reservation management… (CVSS 9.8)
Description
A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 8 oct. 2025
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- janobe wedding reservation management system