30 matches found
CVE-2026-86216: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2026-14756 code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection
A vulnerability was found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/addtour.php of the component Tour Management Page. The manipulation of the argument deleteimage results in sql injection. The attack may be launche...
CVE-2026-14755 code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection
A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/reservations.php of the component Reservations Management Page. The manipulation of the argument delete leads to sql injection. The atta...
CVE-2026-14762: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack...
CVE-2026-14756: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/addtour.php of the component Tour Management Page. The manipulation of the argument deleteimage results in sql injection. The attack may be launche...
CVE-2026-10288: Improper Authentication
A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function passwordverify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch...
CVE-2026-10290: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...
CVE-2025-13170 code-projects Simple Online Hotel Reservation System edit_account.php sql injection
A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...
CVE-2025-13075
The CVE-2025-13075 affects code-projects Responsive Hotel Site 1.0, specifically the file /admin/usersettingdel.php where the eid parameter is manipulated. The vulnerability is a SQL injection arising from lack of input validation, enabling remote exploitation. Public exploits are noted. Several ...
PT-2025-45569
Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A flaw exists in code-projects Responsive Hotel Site 1.0, specifically within the file /admin/roomdel.php. Manipulation of the ID argument can lead to SQL injection. This issue is...
CVE-2025-12855
The CVE-2025-12855 entry covers code-projects Responsive Hotel Site 1.0, where the /admin/newsletterdel.php file is vulnerable. The root cause is lack of validation of the eid parameter, enabling SQL injection with remote exploitation. Multiple connected sources (CNVD, RH Red Hat, NVD mirrors, an...
CVE-2025-6456 code-projects Online Hotel Reservation System order.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launche...
CVE-2025-4500: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...
PT-2025-20624 · Code Projects · Code-Projects Hotel Management System
Name of the Vulnerable Software and Affected Versions: code-projects Hotel Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hotel Management System. The issue affects the Edit function of the Edit Room component. The manipulation of the...
CVE-2024-13008 code-projects Responsive Hotel Site newsletter.php sql injection
A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The...
CVE-2024-12185: Stack-based Buffer Overflow
A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be...
CVE-2024-12186
CVE-2024-12186 affects Code-projects Hotel Management System 1.0, specifically the file hotelnew.c in the Available Room Handler. The issue is a stack-based overflow caused by manipulation of the argument admin_entry, with local access required to exploit. Multiple connected sources confirm the v...
PT-2024-17366 · Unknown · Code-Projects Responsive Hotel Site
Name of the Vulnerable Software and Affected Versions: code-projects Responsive Hotel Site version 1.0 Description: A critical issue has been found in the file /admin/room.php, where the manipulation of the troom argument leads to SQL injection. This issue can be exploited remotely...
