PT-2026-45553 · Code Projects · Hotel/Tourism Reservation System

Imad Alvi · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-10288

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-10288

Produtos afetados

Hotel/Tourism Reservation System

Referências · 7

• 🔥❌ https://github.com/Xmyronn/Hotel-and-Tourism-Reservation-System---Authentication-Bypass.git · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-10288 · Nota de Segurança
• https://vuldb.com/vuln/367581 · Nota
• https://vuldb.com/cve/CVE-2026-10288 · Nota
• https://vuldb.com/submit/825786 · Nota
• https://code-projects.org · Nota
• https://vuldb.com/vuln/367581/cti · Nota