Search

Found 17,409 results in 863ms · Match type: Filtered list

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2025-15435 critical 9.8 9.8 yonyou 5mo ago A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql inject…
CVE-2025-15434 critical 9.8 9.8 yonyou 5mo ago A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to lau…
CVE-2025-15425 critical 9.8 9.8 yonyou 5mo ago A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulatio…
CVE-2025-15424 critical 9.8 9.8 yonyou 5mo ago A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component HTTP GET Parameter Handler. Performing a manipulat…
CVE-2025-15421 critical 9.8 9.8 yonyou 5mo ago A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the…
CVE-2025-15420 critical 9.8 9.8 yonyou 5mo ago A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of the argument ID leads to sql injection. T…
CVE-2025-15410 critical 9.8 9.8 anisha 5mo ago A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument L_email leads to…
CVE-2025-15409 critical 9.8 9.8 anisha 5mo ago A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Delete_product.php. Executing a manipulation of …
CVE-2025-15408 critical 9.8 9.8 anisha 5mo ago A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. Performing a manipulation of the argument dre_title results …
CVE-2025-15407 critical 9.8 9.8 anisha 5mo ago A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. Such manipulation of the argument dre_Ctitle leads to…
CVE-2026-0544 critical 9.8 9.8 itsourcecode 5mo ago A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injec…
CVE-2025-15391 critical 9.8 9.8 5mo ago A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgi_main of the component SSDP Request Handler. This manipulation causes command injection. The attack can be …
CVE-2025-15357 critical 9.8 9.8 5mo ago A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The a…
CVE-2025-15354 critical 9.8 9.8 angeljudesuarez 5mo ago A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can …
CVE-2025-15353 critical 9.8 9.8 angeljudesuarez 5mo ago A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument …
CVE-2025-15263 critical 9.8 9.8 biggidroid 5mo ago A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Us…
CVE-2025-15257 critical 9.8 9.8 5mo ago A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Inte…
CVE-2025-15256 critical 9.8 9.8 5mo ago A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The mani…
CVE-2025-15248 low 3.5 3.5 5mo ago A security flaw has been discovered in sunhailin12315 product-review 商品评价系统 up to 91ead6890b4065bb45b7602d0d73348e75cb4639. This affects an unknown part of the component Write a Review. Performing ma…
CVE-2025-15247 critical 9.8 9.8 gmg137 5mo ago A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Su…
CVE-2025-69015 low 3.8 3.8 5mo ago Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crowdsignal Forms: fro…
CVE-2025-15245 low 3.3 3.3 5mo ago A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path t…
CVE-2025-15244 low 3.7 3.7 phpems 5mo ago A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated …
CVE-2025-15243 critical 9.8 9.8 carmelo 5mo ago A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a manipulation of the argument Username can lead to sql injec…
CVE-2025-15242 low 3.1 3.1 phpems 5mo ago A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function of the component Coupon Handler. Performing a manipulation results in race condition. The attack can be …
CVE-2025-15241 low 3.5 3.5 5mo ago A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such…
CVE-2025-15212 critical 9.8 9.8 fabian 5mo ago A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /home/regfood.php. Performing manipulation of the argument a r…
CVE-2025-15211 critical 9.8 9.8 fabian 5mo ago A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/…
CVE-2025-15210 critical 9.8 9.8 fabian 5mo ago A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of the file /home/editrefugee.php. Such manipulation of the arg…
CVE-2025-15209 critical 9.8 9.8 fabian 5mo ago A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.php. This manipulation of the argument a/b/c/d causes sql i…
CVE-2025-15208 critical 9.8 9.8 fabian 5mo ago A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of th…
CVE-2025-68562 critical 9.9 9.9 5mo ago Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.
CVE-2025-15207 critical 9.8 9.8 campcodes 5mo ago A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The manipulation of the argument chkId[] leads to sql…
CVE-2025-15206 critical 9.8 9.8 campcodes 5mo ago A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a manipulation of the argument txtAreaCode can lead to s…
CVE-2025-15198 critical 9.8 9.8 code-projects 5mo ago A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User ca…
CVE-2025-15196 critical 9.8 9.8 code-projects 5mo ago A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argument userid leads to sql injection. The att…
CVE-2025-15195 critical 9.8 9.8 code-projects 5mo ago A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument li…
CVE-2025-15186 critical 9.8 9.8 fabian 5mo ago A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argum…
CVE-2025-15185 critical 9.8 9.8 fabian 5mo ago A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /home/refugeesreport.php. This manipulation of the ar…
CVE-2025-15184 critical 9.8 9.8 fabian 5mo ago A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugeesreport2.php. The manipulation of the argument a results in …
CVE-2025-15183 critical 9.8 9.8 fabian 5mo ago A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tf…
CVE-2025-15182 critical 9.8 9.8 fabian 5mo ago A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/served.php. Executing manipulation of the argument refNo can lea…
CVE-2025-15181 critical 9.8 9.8 fabian 5mo ago A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulatio…
CVE-2025-15168 critical 9.8 9.8 angeljudesuarez 5mo ago A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection…
CVE-2025-15167 critical 9.8 9.8 admerc 5mo ago A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql inject…
CVE-2025-15166 critical 9.8 9.8 admerc 5mo ago A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in…
CVE-2025-15165 critical 9.8 9.8 admerc 5mo ago A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argume…
CVE-2025-15151 low 3.7 3.7 5mo ago A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/pass…
CVE-2025-15149 low 2.4 2.4 5mo ago A vulnerability has been found in rawchen ecms up to b59d7feaa9094234e8aa6c8c6b290621ca575ded. Affected by this vulnerability is the function updateProductServlet of the file src/servlet/product/upda…
CVE-2025-15141 low 3.1 3.1 halo 5mo ago A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Configuration Handler. Executing a manipulation can lead to inf…
CVE-2025-15134 low 3.5 3.5 5mo ago A security flaw has been discovered in yourmaileyes MOOC up to 1.17. This affects the function subreview of the file mooc/controller/MainController.java of the component Submission Handler. Performin…
CVE-2025-15127 critical 9.8 9.8 fantasticlbp 5mo ago A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this issue is some unknown functionality of the file /controller/a…
CVE-2025-15125 low 3.1 3.1 jeecg 5mo ago A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument depart…
CVE-2025-15124 low 3.1 3.1 jeecg 5mo ago A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improp…
CVE-2025-15123 low 3.1 3.1 jeecg 5mo ago A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPermission/datarule/. Executing manipulation can lead to improper authorization. It…
CVE-2025-15122 low 3.1 3.1 jeecg 5mo ago A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/sysDepartRole/datarule/. Performing manipulation of the argument departId/roleId…
CVE-2025-15120 low 3.1 3.1 jeecg 5mo ago A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/getDeptRoleList. This manipulation of the argument departId causes improper aut…
CVE-2025-15119 low 3.1 3.1 jeecg 5mo ago A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper a…
CVE-2025-15108 low 3.7 3.7 5mo ago A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5. This affects an unknown function of the file config.yml of the component JWT Secret Handler. The manipu…
CVE-2025-15099 critical 9.8 9.8 sim 5mo ago A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps/sim/lib/auth/internal.ts of the component CRON Secret Handler. The manipulatio…
CVE-2025-15095 low 3.5 3.5 sles 5mo ago A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the file httpbin-master/httpbin/core.py. The manipulation leads to cross site script…
CVE-2025-15084 low 3.1 3.1 youlai 5mo ago A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/contro…
CVE-2025-15078 critical 9.8 9.8 angeljudesuarez 5mo ago A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php. The manipulation of the argument sy results in sq…
CVE-2025-15077 critical 9.8 9.8 angeljudesuarez 5mo ago A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID lea…
CVE-2025-15075 critical 9.8 9.8 angeljudesuarez 5mo ago A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.php. Performing manipulation of the argument ID re…
CVE-2025-15074 critical 9.8 9.8 itsourcecode 5mo ago A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customer_details.php. Such manipulation leads to sql injec…
CVE-2025-15073 critical 9.8 9.8 itsourcecode 5mo ago A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us.php. This manipulation of the argument Name causes sql inj…
CVE-2025-15049 critical 9.8 9.8 anisha 6mo ago A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The manipulation of the argument Username leads to sql injection. …
CVE-2025-15048 critical 9.8 9.8 6mo ago A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument…
CVE-2025-14931 critical 9.5 6mo ago Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE
CVE-2025-15034 critical 9.8 9.8 angeljudesuarez 6mo ago A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. …
CVE-2025-15012 critical 9.8 9.8 fabian 6mo ago A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown function of the file /home/home.php. This manipulation of the argument a causes …
CVE-2025-15011 critical 9.8 9.8 carmelo 6mo ago A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attac…
CVE-2025-15008 critical 9.8 9.8 6mo ago A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page res…
CVE-2025-15005 low 3.7 3.7 couchcms 6mo ago A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.example.php of the component reCAPTCHA Handler. The manipulation of the argument K_…
CVE-2025-15002 critical 9.8 9.8 seacms 6mo ago A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/lim…
CVE-2025-14990 critical 9.8 9.8 campcodes 6mo ago A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulatio…
CVE-2025-14989 critical 9.8 9.8 campcodes 6mo ago A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation l…
CVE-2025-14968 critical 9.8 9.8 carmelo 6mo ago A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument ema…
CVE-2025-14967 critical 9.8 9.8 angeljudesuarez 6mo ago A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidates_report.php. The manipulation of the ar…
CVE-2025-14961 critical 9.8 9.8 fabian 6mo ago A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument c…
CVE-2025-14960 critical 9.8 9.8 fabian 6mo ago A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Na…
CVE-2025-14959 critical 9.8 9.8 carmelo 6mo ago A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username c…
CVE-2025-14955 low 3.7 3.7 open5gs 6mo ago A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation r…
CVE-2025-14952 critical 9.8 9.8 campcodes 6mo ago A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategoryNa…
CVE-2025-14951 critical 9.8 9.8 fabian 6mo ago A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument post_con…
CVE-2025-14950 critical 9.8 9.8 fabian 6mo ago A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This manipulation of the argument ID causes sql…
CVE-2025-1928 critical 9.1 9.1 restajet 6mo ago Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affect…
CVE-2025-14940 critical 9.8 9.8 fabian 6mo ago A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/delete_user.php. This manipulation of the argument ID caus…
CVE-2025-64236 critical 9.8 9.8 6mo ago Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.
CVE-2025-14877 critical 9.8 9.8 campcodes 6mo ago A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_retailer.php. The manipulation of the argument cmbAreaCode leads to…
CVE-2025-58951 critical 9.3 9.3 6mo ago Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Inje…
CVE-2025-58935 critical 9.8 9.8 axiomthemes 6mo ago Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lunna lunna allows PHP Local File Inclusion.This issue affects Lun…
CVE-2025-14841 low 3.3 3.3 FIX debian debian 6mo ago A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in t…
CVE-2025-14836 low 2.7 2.7 zzcms 6mo ago A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes clea…
CVE-2025-14833 critical 9.8 9.8 anisha 6mo ago A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipula…
CVE-2025-14832 critical 9.8 9.8 admerc 6mo ago A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argume…
CVE-2023-53899 critical 9.8 9.8 podcastgenerator 6mo ago PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to…
CVE-2025-14722 low 2.4 2.4 6mo ago A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the componen…
CVE-2025-14711 critical 9.8 9.8 fantasticlbp 6mo ago A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulatio…