A vulnerability described as critical has been identified in Inoutscripts Inout EasyRooms Ultimate Edition 1.0. Affected is an unknown function of the file search/searchdetailed. The manipulation of the argument numguest results in sql injection.
This vulnerability is reported as CVE-2019-25527. The attack can be launched remotely. Moreover, an exploit is present.
