Hotel and Tourism Reservation System vulnerabilities
3 known CVE vulnerabilities in Hotel and Tourism Reservation System, translated and rated.
- CVE-2026-10290High
In code-projects Hotel and Tourism Reservation System 1.0, SQL injection vulnerability exists in tour.php. A remote attacker can manipulate the GET parameter 'tour', leading to SQL injection. The exploit is publicly available.
- CVE-2026-10289Medium
A security flaw in code-projects Hotel and Tourism Reservation System 1.0 in file /ht/tour.php allows cross site scripting via manipulation of arguments name, email, people, number. Remote attack is possible and exploit is public.
- CVE-2026-10288High
In code-projects Hotel and Tourism Reservation System 1.0, the password_verify function in /admin/login.php improperly authenticates the Password argument, leading to improper authentication. The attack is remotely exploitable. The exploit is public.