CVE-2026-10288 is a high severity vulnerability in code-projects Hotel and Tourism Reservation System 1.0, allowing remote attackers to bypass authentication via manipulation of the Password argument in the /admin/login.php file.
PoC
Hotel and Tourism Reservation System 1.0
cve-2026-10288
authentication bypass
web application
2r
2t
1c
updated