Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:hotel_and_tourism_reservation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductHotel And Tourism Reservation System (f9833d1a-d938-5e5b-94af-f562c82d2247)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11342 vulnerable 2026-06-08 07:47:14.113479 code-projects Hotel and Tourism Reservation System details.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-06-05T17:00:10.659Z
Updated: 2026-06-05T19:04:01.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10290 vulnerable 2026-06-08 07:47:13.784329 code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-01T20:30:10.524Z
Updated: 2026-06-02T12:25:44.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10289 vulnerable 2026-06-08 07:47:13.784081 code-projects Hotel and Tourism Reservation System tour.php cross site scripting
MEDIUM (4.3)
A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-01T20:15:08.408Z
Updated: 2026-06-02T12:33:57.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10288 vulnerable 2026-06-08 07:47:13.783864 code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication
HIGH (7.3)
A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2026-06-01T20:00:11.320Z
Updated: 2026-06-02T13:25:49.882Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.