Skip to content
OpenAdvisories

Product · code-projects

Hotel and Tourism Reservation System

4 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-10290 Public exploit

    code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

    A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql in…

  • Medium 4.3
    CVE-2026-10289 Public exploit

    code-projects Hotel and Tourism Reservation System tour.php cross site scripting

    A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The…

  • High 7.3
    CVE-2026-10288 Public exploit

    code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

    A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper a…