https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15127.htmlhttps://patchthecve.com/cve/CVE-2025-15127.htmlWed, 07 Oct 2026 12:10:00 +0000HIGH 7.3: A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this issue is some unknown functionality of the file /controller/api/Room.php. Such manipulation of the argument hotelId leads to sql injection. The attack may be launhttps://patchthecve.com/cve/CVE-2025-14711.htmlhttps://patchthecve.com/cve/CVE-2025-14711.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried outhttps://patchthecve.com/cve/CVE-2025-14710.htmlhttps://patchthecve.com/cve/CVE-2025-14710.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects an unknown part of the file /controller/api/OrderList.php. The manipulation of the argument telephone results in sql injection. The attack can be executed remotely. The exploit is