cleantalk
Vulnerabilities and Security Researches

Hotel Booking, CVE-2025-39526

CVE, Research URL

CVE-2025-39526

Application

Hotel Booking

Published on
Apr 17, 2025
Research Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking allows PHP Local File Inclusion. This issue affects Hotel Booking: from n/a through 3.6.
Affected versions
Min -, max 3.6.
Status
vulnerable