337 matches found
CVE-2026-14762-PoC-Exploit
CVE-2026-14762 – Code‑Projects Hotel & Tourism Reservation 1.0 SQL 注入漏洞利用工具 -orange -red 功能完备、多线程、基于时间盲注的 SQL 注入漏洞利用工具，针对 CVE‑2026‑14762。 目标为 Code‑Projects Hotel & Tourism Reservation 应用（版本 1.0）的 /admin/rooms.php 端点。 可实现完整的数据库枚举、文件系统读取（LOADFILE）和任意文件写入（INTO OUTFILE / DUMPFILE）——最终通过部署 WebShell...
CVE-2026-10290-SQLI
Hotel and Tourism Reservation System - Unauthenticated SQL Injection in tour.php Vulnerability Details...
CVE-2026-90524
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
CVE-2026-90523
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
CVE-2026-90524
jaychouchannel Tourism-Management-System contains a missing authentication flaw in the Update Endpoint component, allowing a remote unauthenticated attacker to manipulate an unknown function. The flaw was tracked in GitHub issue #11 and patched in commit 84d8ec3 . A proof-of-concept exploit has b...
EUVD-2026-77022
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
CVE-2026-90522
A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...
CVE-2026-90520
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...
CVE-2026-90521
A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the file MenpiaodingdanController.java of the component CRUD. The manipulation of the argument ID results in authorization bypass. It...
CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90523
CVE-2026-90523 affects the jaychouchannel Tourism-Management-System GitHub project, specifically the User Register Endpoint in UsersController.java. The root cause is improper privilege management arising from manipulation of the UsersEntity argument, allowing a remote, unauthenticated attacker t...
EUVD-2026-77021
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90522
CVE-2026-90522 affects the jaychouchannel Tourism-Management-System (up to commit d984d172). The vulnerability resides in the resetPass function of UsersControllers.java within the Password Recovery component, resulting in a weak password recovery mechanism. The flaw is remotely exploitable with ...
CVE-2026-90522 jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery
A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...
CVE-2026-90522 jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery
A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...
EUVD-2026-77020
A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersController.java of the component Password Recovery. This manipulation causes weak password recovery. The attack can be...
CVE-2026-90521 jaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization
A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the file MenpiaodingdanController.java of the component CRUD. The manipulation of the argument ID results in authorization bypass. It...