Hotels_Server up to 2018-11-05 controller/fetchpwd.php username sql injection

A vulnerability was found in Hotels_Server up to 2018-11-05 (Hospitality Software) and classified as critical. Affected by this issue is an unknown code block of the file controller/fetchpwd.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.