A vulnerability described as critical has been identified in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown function of the file /admin/add_account.php. The manipulation of the argument Name results in sql injection.
This vulnerability was named CVE-2025-12594. The attack may be performed from remote. In addition, an exploit is available.
