PT-2026-21246 · Sourcecodester · Simple Responsive Tourism Website

Anxxc + 3 · Published 2026-02-20 · Updated 2026-02-20 · CVE-2026-2848

NVD

CVSS v2.0

7.5

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-2848

Affected Products

Simple Responsive Tourism Website

References · 6

• 🔥 https://github.com/anupeng/CVE/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2848 · Security Note
• https://vuldb.com/?submit.753967 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.347084 · Note
• https://vuldb.com/?id.347084 · Note