PT-2026-55814 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14764

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add event.php of the component Event Management Page. Such manipulation of the argument fdetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-14764

Produtos afetados

Hotel/Tourism Reservation

Referências · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-add_event.php_SQLi.md · Exploit
• https://vuldb.com/vuln/376353 · Nota
• https://code-projects.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14764 · Nota de Segurança
• https://vuldb.com/submit/850582 · Nota
• https://vuldb.com/vuln/376353/cti · Nota
• https://vuldb.com/cve/CVE-2026-14764 · Nota