CVE-2024-42775
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add …
Published: 2024-08-22 · CVSS: 9.1 · CVSS 3.1
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7