What is GHSA-gxxh-8wpx-72mr?

GHSA-gxxh-8wpx-72mr is a security advisory published by GitHub Security Advisories with Critical severity. Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL...

Which CVE IDs does GHSA-gxxh-8wpx-72mr cover?

GHSA-gxxh-8wpx-72mr covers the following CVE IDs: CVE-2020-21012. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gxxh-8wpx-72mr?

GHSA-gxxh-8wpx-72mr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-gxxh-8wpx-72mrCriticalCVSS 9.8

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

October 22, 2026

🔗 CVE IDs covered (1)

CVE-2020-21012 →

📋 Description

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-21012
https://github.com/hitIer/web_test/tree/master/hotel
https://github.com/advisories/GHSA-gxxh-8wpx-72mr