PatchTheCVE: vaibhavverma9999https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-42558: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_idhttps://patchthecve.com/cve/CVE-2024-42558.htmlhttps://patchthecve.com/cve/CVE-2024-42558.htmlWed, 17 Jun 2026 07:49:38 +0000CRITICAL 9.8: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_room.php.CVE-2024-42557: A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 9https://patchthecve.com/cve/CVE-2024-42557.htmlhttps://patchthecve.com/cve/CVE-2024-42557.htmlWed, 17 Jun 2026 07:49:38 +0000HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.CVE-2024-42556: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_tyhttps://patchthecve.com/cve/CVE-2024-42556.htmlhttps://patchthecve.com/cve/CVE-2024-42556.htmlWed, 17 Jun 2026 07:49:38 +0000CRITICAL 9.8: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_removed.php.CVE-2024-42555: A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit https://patchthecve.com/cve/CVE-2024-42555.htmlhttps://patchthecve.com/cve/CVE-2024-42555.htmlWed, 17 Jun 2026 07:49:37 +0000HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.CVE-2024-42554: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_tyhttps://patchthecve.com/cve/CVE-2024-42554.htmlhttps://patchthecve.com/cve/CVE-2024-42554.htmlWed, 17 Jun 2026 07:49:37 +0000HIGH 8.8: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_added.php.CVE-2024-42553: A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91https://patchthecve.com/cve/CVE-2024-42553.htmlhttps://patchthecve.com/cve/CVE-2024-42553.htmlWed, 17 Jun 2026 07:49:37 +0000HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.CVE-2024-42552: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_idhttps://patchthecve.com/cve/CVE-2024-42552.htmlhttps://patchthecve.com/cve/CVE-2024-42552.htmlWed, 17 Jun 2026 07:49:37 +0000HIGH 8.6: Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php.