Critical severity · published Mar 19, 2023
CVE-2023-1498
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Responsive Hotel Site · Fabian
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-1498
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-1498
Broken Link
https://github.com/Decemberus/BugHub/blob/main/Responsive%20Hotel%20Site%20System%20Has%20Sql%20injection%20vulnerabilities.pdf
Permissions Required
https://vuldb.com/?ctiid.223398
Permissions Required
https://vuldb.com/?id.223398
More from Responsive Hotel Site
9.8
CVE-2025-13076
code-projects Responsive Hotel Site usersetting.php sql injection
9.8
CVE-2025-13075
code-projects Responsive Hotel Site usersettingdel.php sql injection
9.8
CVE-2025-12913
code-projects Responsive Hotel Site roomdel.php sql injection
9.8
CVE-2025-12857
code-projects Responsive Hotel Site roombook.php sql injection
9.8
CVE-2025-12856
code-projects Responsive Hotel Site reservation.php sql injection