CVE-2026-14763: falha de média gravidade em code-projects Hotel and Tourism Reservation
code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection
Publicada em · Atualizada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidade de exploração
0.4%top 64% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tour_reserves.php of the component Tour Reservations Page. This manipulation of the argument tour causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Hotel and Tourism ReservationPoCs públicas encontradas — 1
cve_referenceraw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-tour_reserves.php-SQLi.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — code-projects Hotel and Tourism Reservation
No mesmo produto, das mais perigosas para as menos.
CVE-2026-14764MEDIUMcode-projects Hotel and Tourism Reservation Event Management add_event.php sql injectionEPSS 0.4%CVE-2026-14762MEDIUMcode-projects Hotel and Tourism Reservation Room Management rooms.php sql injectionEPSS 0.4%CVE-2026-14756MEDIUMcode-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injectionEPSS 0.4%CVE-2026-14755MEDIUMcode-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injectionEPSS 0.4%CVE-2026-14754MEDIUMcode-projects Hotel and Tourism Reservation add_room.php sql injectionEPSS 0.4%