A SQL injection vulnerability exists in code-projects Simple Online Hotel Reservation System 2.0 in the /admin/add_account.php file. The flaw allows remote attackers with high privileges to manipulate the 'Name' argument, potentially leading to unauthorized data access or modification. Public exploit code has been released. The vulnerability has a medium severity rating with a CVSS score of 4.7.