CVE-2015-4713: Apphp Hotel Site

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.

Affected products

• Apphp Hotel Site: version 3.0.9 only; version 3.1.3 only; version 3.2.4 only; version 3.3.0 only; version 3.4.4 only; version 3.5.1 only; …

Published 2015-06-22. Last modified 2026-06-17.