PT-2026-45553 · Code Projects · Hotel/Tourism Reservation System

Imad Alvi · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10288

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-10288

Affected Products

Hotel/Tourism Reservation System

References · 7

• 🔥❌ https://github.com/Xmyronn/Hotel-and-Tourism-Reservation-System---Authentication-Bypass.git · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-10288 · Security Note
• https://vuldb.com/vuln/367581 · Note
• https://vuldb.com/cve/CVE-2026-10288 · Note
• https://vuldb.com/submit/825786 · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/367581/cti · Note