Threats tagged 'ghsa-q2pr-r6jf-wv38'

A SQL injection vulnerability exists in code-projects Responsive Hotel Site 1.0 within the /admin/newsletterdel.php file via the 'eid' parameter. This flaw allows remote attackers with high privileges to manipulate SQL queries, potentially leading to limited confidentiality, integrity, and availability impacts. Public exploit code has been released, increasing the risk of exploitation. The vulnerability has a medium severity score of 4.7.