9.3
Critical
CVE-2025-39504 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Blind SQL Injection.This issue affects Goodlayers Hotel: from n/a through <= 3.1.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Goodlayers Hotel 3.1 | earliest → 3.1.4 | No fix stated |