Skip to content
Threat Feed
Subscribe

Tag

Code-Projects

3 briefs RSS
high threat

CVE-2026-15137: Remote SQL Injection in code-projects Interview Management System

A critical SQL injection vulnerability (CVE-2026-15137) has been identified in code-projects Interview Management System version 1.0, allowing remote unauthenticated attackers to manipulate the 'ID' argument in the '/inc/classes/View.php' file, leading to arbitrary SQL query execution and potential data compromise; a public exploit is available.

exploited Interview Management System 1.0 sql-injection webserver vulnerability cve code-projects interview-management-system
1r 2t 1c 6i
high threat

CVE-2026-14756: SQL Injection in code-projects Hotel and Tourism Reservation

A remote SQL injection vulnerability (CVE-2026-14756) exists in code-projects Hotel and Tourism Reservation version 1.0, allowing unauthenticated attackers to exploit improper input sanitization in the `delete_image` parameter of `/admin/add_tour.php` to bypass authentication, extract sensitive data, or manipulate database records, with a public exploit available.

exploited Hotel and Tourism Reservation 1.0 sql-injection web-application cve code-projects
1r 3t 1c 6i
high advisory

CVE-2026-14754: SQL Injection in code-projects Hotel and Tourism Reservation

A critical SQL injection vulnerability (CVE-2026-14754) in code-projects Hotel and Tourism Reservation 1.0's `/admin/add_room.php` file allows a remote, unauthenticated attacker to manipulate arguments such as `delete_image`, `edit`, `description`, `number`, `price`, `rooms`, or `type` to execute arbitrary SQL commands, leading to sensitive data exposure and potential database compromise.

Hotel and Tourism Reservation 1.0 sql-injection web-application cve code-projects remote-code-execution
1r 1t 1c