CVE-2018-17842

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter.

Source: CVE-2018-17842