Cpe:2.3:a:code_projects:hotel_and_tourism_reservation_system_1_0:*:*:*:*:*:*:*:*

CVE-2026-10288 is a high severity vulnerability in code-projects Hotel and Tourism Reservation System 1.0, allowing remote attackers to bypass authentication via manipulation of the Password argument in the /admin/login.php file.