Anisha Avl Rooms vulnerabilities

2 CVEs affecting Anisha Avl Rooms, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7606, published 2025-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-7606, published 2025-07-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection.…
CVE-2025-7605, published 2025-07-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the…