PT-2026-55812 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14762

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-14762

Produtos afetados

Hotel/Tourism Reservation

Referências · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-rooms.php-SQLi.md · Exploit
• https://vuldb.com/vuln/376351 · Nota
• https://vuldb.com/cve/CVE-2026-14762 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14762 · Nota de Segurança
• https://vuldb.com/vuln/376351/cti · Nota
• https://code-projects.org · Nota
• https://vuldb.com/submit/850580 · Nota