CVE-2026-10290-SQLI

호텔 및 관광 예약 시스템 - tour.php의 인증되지 않은 SQL 인젝션 취약점 세부 정보 필드| 세부 정보 ---|--- 제목| 호텔 및 관광 예약 시스템 - tour GET 매개변수를 통한 SQL 인젝션 공급업체| code-projects.org 공급업체 URL| https://code-projects.org/hotel-and-tourism-reservation-in-php-with-source-code/ 제품| 호텔 및 관광 예약 시스템 버전| 1.0 취약점 유형| SQL 인젝션 CWE| CWE-89 CVSS 점수|...

CVE-2026-10290

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...

EUVD-2026-33819

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...

CVE-2026-10290

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...

CVE-2026-10289

The CVE concerns code-projects Hotel and Tourism Reservation System 1.0. Affected is an unknown function in the file /ht/tour.php where manipulating the arguments /email, /people, or /number leads to cross-site scripting. The attack is remote, and the exploit has been released publicly. No remedi...

CVE-2026-10289

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The...

CVE-2026-10289 code-projects Hotel and Tourism Reservation System tour.php cross site scripting

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The...

CVE-2026-10289: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The...

Code-Projects Hotel and Tourism Reservation System 代码注入漏洞

Code-Projects Hotel and Tourism Reservation System is an open-source hotel and tourism reservation system developed by Code-Projects. Version 1.0 of the Code-Projects Hotel and Tourism Reservation System has a code injection vulnerability. This vulnerability arises from unauthorized operations on...

CVE-2026-10290: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...

EUVD-2008-6200

Malware in sbrugna...

maplejt.com XSS vulnerability

Vulnerable URL: https://www.maplejt.com/tour.php?id=2016045"alert/OPENBUGBOUNTY/...

hollywoodgfs.com XSS vulnerability

Vulnerable URL: http://hollywoodgfs.com/tour.php?nats=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check hollywoodgfs.com SSL...

Sql injection

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230

CVE-2008-6230 affects the Pre Projects Pre Podcast Portal (Tour.php). The vulnerability is an SQL injection via the id parameter that enables remote attackers to execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (NETWORK, LOW attack complexity, NONE authentication, PARTIAL impacts ...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...