nikhil-bhalerao has 15 CVEs on record. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (13) and CWE-89 (13).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-11473High· 7.3A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.040CVE-2025-11472High· 7.3A flaw has been found in SourceCodester Hotel and Lodge Management System 1.040CVE-2025-11471High· 7.3A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.040CVE-2025-11397High· 7.3A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.040CVE-2025-11474Medium· 6.3A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.035
nikhil-bhalerao vulnerabilities
CVEs affecting nikhil-bhalerao, newest first. Open any entry for full detail, references, and exploit status.
15 CVEsRSS
CVE-2025-11474Medium· 6.3A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_booking.php. Performing manipulation of the argument Name results in sql inje…
CVE-2025-11473High· 7.3A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /edit_curr.php. Such manipulation of the argument currsymbol leads to sql injection. It is possible to la…
CVE-2025-11472High· 7.3A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0
A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /edit_room.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack …
CVE-2025-11471High· 7.3A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /edit_customer.php. The manipulation of the argument ID results in sql injection. The attack may be perfor…
CVE-2025-11470Medium· 4.7A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0
A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted element is an unknown function of the file /manage_website.php. The manipulation of the argument website_image/back_lo…
CVE-2025-11469Medium· 6.3A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_customer.php. Executing manipulation of the argument Contact can lead to sql inje…
CVE-2025-11405Medium· 6.3A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /del_tax.php. The manipulation of the argument ID leads to sql injection. The attack can be initi…
CVE-2025-11404Medium· 6.3A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/save_tax.php. Executing manipulation of the argument percentage can lead to sql injection. It is poss…
CVE-2025-11403Medium· 6.3A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of the file /del_booking.php. Performing manipulation of the argument ID results in sql injection. It…
CVE-2025-11401Medium· 6.3A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0
A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /pages/save_curr.php. This manipulation of the argument currcode causes sql injection. The attack is possible to b…
CVE-2025-11400Medium· 6.3A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /del_room.php. The manipulation of the argument ID results in sql injection. The attack can be executed re…
CVE-2025-11399Medium· 6.3A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0
A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/save_room.php. The manipulation of the argument floorno leads to sql injection. Remot…
CVE-2025-11398Medium· 6.3A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of the component Profile Page. Executing manipulation of the argument image can …
CVE-2025-11397High· 7.3A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0
A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /login.php. Performing manipulation of the argument email results in sql injection. The …
CVE-2025-11402Medium· 6.3A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0
A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /del_curr.php. Such manipulation of the argument ID leads to sql injection. Th…