PT-2026-45889 · Sourcecodester · Online Hotel Reservation System

Published 2026-06-03 · Updated 2026-06-03 · CVE-2026-10693

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the component Administrative Endpoint. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-10693

Affected Products

Online Hotel Reservation System

References · 7

• 🔥 https://medium.com/@hemantrajbhati5555/broken-access-control-in-sourcecodester-online-boat-reservation-system-1-0-4ed0380d2222 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10693 · Security Note
• https://vuldb.com/submit/830894 · Note
• https://vuldb.com/cve/CVE-2026-10693 · Note
• https://vuldb.com/vuln/367962/cti · Note
• https://vuldb.com/vuln/367962 · Note
• https://sourcecodester.com · Note