PT-2026-55813 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14763

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tour reserves.php of the component Tour Reservations Page. This manipulation of the argument tour causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-14763

Affected Products

Hotel/Tourism Reservation

References · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-tour_reserves.php-SQLi.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14763 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/cve/CVE-2026-14763 · Note
• https://vuldb.com/vuln/376352 · Note
• https://vuldb.com/submit/850581 · Note
• https://vuldb.com/vuln/376352/cti · Note