CVE-2024-25316 - Hotel Management System - SQL Injection-4 Exploit Title: Hotel Management System - SQL Injection-4 Date: 2024-02-01 Exploit Author: Tuba Kavgaci Vendor Homepage: https://code-projects.org/hotel-management-system-in-php-with-source-code/ Software Link: https://download.code-projects.org/details/cd8fc4cb-c6b6-48f7-9cc3-27044a0a26a3 Version: 1.0 Tested on: Kali Linux + PHP 8.2.12, Apache 2.4.58 CVE: CVE-2024-25316 Description Hotel Management System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usettingdel.php?eid=2. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit the latest vulnerabilities in the underlying database. Proof of Concept: Go to this address: http://localhost/Hotel/admin/usersetting.php Click delete user button Capture the request via Burp Suite and send it to the Repeater. Copy the request and paste it into an "r.txt" file. Use sqlmap to exploit. In sqlmap, use 'eid' parameter to dump the database. Captured Burp request: Current database: hotel