CVE-2019-25748 | Cmsjunkie JHotelReservation 6.0.7 search-hotels Endpoint rooms sql injection (Exploit 46234 / EDB-46234)

A vulnerability marked as critical has been reported in Cmsjunkie JHotelReservation 6.0.7. Affected by this issue is some unknown functionality of the component search-hotels Endpoint. This manipulation of the argument rooms causes sql injection.

The identification of this vulnerability is CVE-2019-25748. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.