CVE-2019-25750 | Cmsjunkie MultipleHotelReservation 6.0.7 search-hotels Endpoint hotel_id sql injection (Exploit 46232 / EDB-46232)

June 19, 2026 Yanac

A vulnerability was found in Cmsjunkie MultipleHotelReservation 6.0.7. It has been declared as critical. Affected is an unknown function of the component search-hotels Endpoint. Executing a manipulation of the argument hotel_id can lead to sql injection.

This vulnerability appears as CVE-2019-25750. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More