PT-2026-47007 · Code Projects · Hotel/Tourism Reservation System

12139Xxl · Published 2026-06-05 · Updated 2026-06-05 · CVE-2026-11342

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-11342

Affected Products

Hotel/Tourism Reservation System

References · 7

• 🔥 https://github.com/khanfyhhfgfe-cmyk/ht-sql/blob/main/ht_sql.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11342 · Security Note
• https://vuldb.com/cve/CVE-2026-11342 · Note
• https://vuldb.com/vuln/368883/cti · Note
• https://vuldb.com/vuln/368883 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/832902 · Note