PT-2026-55814 · Code Projects · Hotel/Tourism Reservation

Anubhav106 · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14764

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add event.php of the component Event Management Page. Such manipulation of the argument fdetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-14764

Affected Products

Hotel/Tourism Reservation

References · 7

• 🔥 https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-add_event.php_SQLi.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14764 · Security Note
• https://vuldb.com/vuln/376353 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/850582 · Note
• https://vuldb.com/vuln/376353/cti · Note
• https://vuldb.com/cve/CVE-2026-14764 · Note