PT-2026-55812 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14762

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-14762

Affected Products

Hotel/Tourism Reservation

References · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-rooms.php-SQLi.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14762 · Security Note
• https://vuldb.com/vuln/376351 · Note
• https://vuldb.com/cve/CVE-2026-14762 · Note
• https://vuldb.com/vuln/376351/cti · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/850580 · Note