An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hotel_management_system | Jayesh | 1.0 (including) | 1.0 (including) |