Cpe:2.3:a:code_projects:hotel_and_tourism_reservation_1_0:*:*:*:*:*:*:*:*

A critical SQL injection vulnerability (CVE-2026-14762) exists in code-projects Hotel and Tourism Reservation version 1.0, located in the `/admin/rooms.php` file's Room Management Page, allowing remote attackers to manipulate the `delete` argument for data compromise, with a public exploit now available.