CVE-2025-4764CWE-89

SQLi in Aida Computer's Hotspot

High · published January 22, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

🚨 SQL injection lurking in the Hotel Guest Hotspot! A crafty guest could manipulate database queries like a chef substituting ingredients without asking the kitchen. 🔥 Think of the Hotel Guest Hotspot as a restaurant where anyone can sneak into the kitchen and change the recipe without the chef knowing—dangerous, right? An attacker can easily slip in some malicious SQL code, potentially compromising the entire database. If exploited, this vulnerability allows attackers to access, modify, or delete sensitive guest data, all without permission! This could lead to a complete breach of personal information and trust—absolutely devastating for both guests and the hotel's reputation.

Put simply

Think of the Hotel Guest Hotspot as a restaurant where anyone can sneak into the kitchen and change the recipe without the chef knowing—dangerous, right? An attacker can easily slip in some malicious SQL code, potentially compromising the entire database. This vulnerability arises from improper neutralization of special elements in SQL commands, allowing unauthorized SQL code execution within the Hotel Guest Hotspot system.

What to do

If exploited, this vulnerability allows attackers to access, modify, or delete sensitive guest data, all without permission! This could lead to a complete breach of personal information and trust—absolutely devastating for both guests and the hotel's reputation. Immediately update to the patched version once available, and ensure that all user inputs are properly sanitized and validated. It’s crucial to implement parameterized queries to prevent future injections. 🛡️ This is fixable! Stay vigilant and follow the steps to secure your system. You've got this! 💪

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00462 · 39.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-01-22T09:13Z
EPSS history
Timeline
  • 22 JAN 09:13Z
    SQLi in Aida Computer's Hotspot
    cvelistv5