A vulnerability labeled as critical has been found in Inoutscripts Inout EasyRooms Ultimate Edition 1.0. This affects an unknown function of the file search/searchdetailed of the component POST Request Handler. Executing a manipulation of the argument location can lead to sql injection.
This vulnerability is registered as CVE-2019-25526. It is possible to launch the attack remotely. Furthermore, an exploit is available.