High severity7.3NVD Advisory· Published Dec 15, 2025· Updated Apr 29, 2026
CVE-2025-14711
CVE-2025-14711
Description
A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:fantasticlbp:hotels_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fantasticlbp:hotels_server:*:*:*:*:*:*:*:*range: <=2019-03-23
- (no CPE)range: <=67b44df162fab26df209bd5d5d542875fcbec1d0
Patches
Vulnerability mechanics
References
6- github.com/navex2/CVE/issues/1nvdExploitIssue TrackingMitigationThird Party Advisory
- github.com/navex2/CVE/issues/2nvdExploitIssue TrackingMitigationThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.