FantasticLBP vulnerabilities
We track 3 vulnerabilities in FantasticLBP products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 28, 2025.
Latest FantasticLBP vulnerabilities
- 9.8 Critical severity
Hotels_Server: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this issue is some unknown functionality of the file /controller/api/Room.php. Such manipulation of the argument hotelId leads
- 9.8 Critical severity
Hotels Server: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection.
- 9.8 Critical severity
Hotels Server: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects an unknown part of the file /controller/api/OrderList.php. The manipulation of the argument telephone results in sql injection. The attack c