CVE-2025-40618 | Bookgy HTTP Request bkg_imprimir_comprobante.php IDRESERVA sql injection

A vulnerability has been found in Bookgy and classified as critical. Affected by this vulnerability is an unknown functionality of the file /bkg_imprimir_comprobante.php of the component HTTP Request Handler. The manipulation of the argument IDRESERVA leads to sql injection.

This vulnerability is known as CVE-2025-40618. The attack can be launched remotely. There is no exploit available.VulDB Recent EntriesRead More