CVE-2026-14763: code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection
Published Jul 5, 2026
·Updated
A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tourreserves.php of the component Tour Reservations Page. This manipulation of the argument tour causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Affected Software
1 affected component
Code-projects Hotel and Tourism Reservation=1.0
Event History
Jul 5, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-14763?
CVE-2026-14763 has a high severity rating of 7.3.
2
What type of vulnerability is CVE-2026-14763?
CVE-2026-14763 is classified as an SQL Injection vulnerability.
3
How do I fix CVE-2026-14763?
To fix CVE-2026-14763, it is recommended to sanitize and validate all user input in the tour_reserves.php file.
4
What components are affected by CVE-2026-14763?
CVE-2026-14763 affects the Tour Reservations Page of the Code-projects Hotel and Tourism Reservation version 1.0.
5
Can CVE-2026-14763 be exploited remotely?
Yes, the vulnerability CVE-2026-14763 can be exploited remotely.