cleantalk
Vulnerabilities and Security Researches

Hotel Booking, CVE-2025-53259

CVE, Research URL

CVE-2025-53259

Application

Hotel Booking

Published on
Jun 27, 2025
Research Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking allows PHP Local File Inclusion. This issue affects Hotel Booking: from n/a through 3.7.
Affected versions
Min -, max 3.8.
Status
vulnerable