SourceCodester Janobe Resort Reservation System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in SourceCodester Janobe Resort Reservation System version 1.0. The issue arises in the file '/room_rates.php', where the 'q' parameter is improperly processed, allowing for SQL injection. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation in the database.

Reproduction

The vulnerability can be reproduced by sending a request to the '/room_rates.php' file with a crafted 'q' parameter that includes SQL injection payloads. This can be done using a tool like SQLMap, which can automate the injection process and exploit the vulnerability.