CVE-2025-11404: Medium SQL Injection in SourceCodester Hotel and Lodge
CVE-2025-11404 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via save_tax.php. No fix is listed, so restrict access and fix the query.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-11404 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via save_tax.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11403 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via del_booking.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11402 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via del_curr.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11401 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via save_curr.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11400 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via del_room.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11399 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0 via save_room.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11397 is a High SQL injection in SourceCodester Hotel and Lodge 1.0 via login.php. No fix is listed. Restrict access and use prepared statements.
CVE-2025-11396 is a High SQL injection in code-projects Food Ordering 1.0 via product.php. No fix is listed. Restrict access and use prepared statements.
CVE-2025-11367 is a Critical deserialization RCE in the N-central Windows Software Probe before 2025.4. Upgrade to 2025.4 or later and read the advisory.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.