CVE-2024-42775

9.1 criticalEPSS 0.5%

Critical (9.1) in jayesh hotel management system. EPSS 0.5% chance of exploitation in the next 30 days.

An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jayesh:hotel_management_system

References

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Add%20New%20Room%20Entry.pdf
https://www.kashipara.com/

Check your stack JSON