CVE-2026-14764: falha de média gravidade em code-projects Hotel and Tourism Reservation
code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection
Publicada em · Atualizada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidade de exploração
0.4%top 64% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add_event.php of the component Event Management Page. Such manipulation of the argument fdetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Hotel and Tourism ReservationPoCs públicas encontradas — 1
cve_referenceraw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Hotel-Tourism-Reservation-add_event.php_SQLi.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — code-projects Hotel and Tourism Reservation
No mesmo produto, das mais perigosas para as menos.
CVE-2026-14763MEDIUMcode-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injectionEPSS 0.4%CVE-2026-14762MEDIUMcode-projects Hotel and Tourism Reservation Room Management rooms.php sql injectionEPSS 0.4%CVE-2026-14756MEDIUMcode-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injectionEPSS 0.4%CVE-2026-14755MEDIUMcode-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injectionEPSS 0.4%CVE-2026-14754MEDIUMcode-projects Hotel and Tourism Reservation add_room.php sql injectionEPSS 0.4%