PT-2026-55803 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14755

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/reservations.php of the component Reservations Management Page. The manipulation of the argument delete leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-14755

Affected Products

Hotel/Tourism Reservation

References · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-add_event.php-SQLi.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14755 · Security Note
• https://vuldb.com/vuln/376344/cti · Note
• https://vuldb.com/cve/CVE-2026-14755 · Note
• https://vuldb.com/vuln/376344 · Note
• https://vuldb.com/submit/850365 · Note
• https://code-projects.org · Note