CVE-2026-14754

creationtimestamp| type| source ---|---|--- 2026-07-05 16:39:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvzbj4pxt2s 2026-07-06 12:08:13+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpy2ki5a5n2j...

CVE-2026-14754

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/addroom.php. Executing a manipulation of the argument deleteimage/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. T...