AVL Rooms vulnerabilities

2 known vulnerabilities in AVL Rooms from code-projects. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  AVL Rooms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-7606Jul 14, 2025code-projects

  A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit

• 9.8 Critical severity

  AVL Rooms: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-7605Jul 14, 2025code-projects

  A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument first_name leads to sql injection. The attack may be launch