Tag

Data-Compromise

1 brief RSS

CVE-2026-14764: SQL Injection in code-projects Hotel and Tourism Reservation

An unauthenticated attacker can remotely exploit CVE-2026-14764, an SQL injection vulnerability in code-projects Hotel and Tourism Reservation 1.0's `/admin/add_event.php` component via the `fdetails` argument, to manipulate database queries and compromise sensitive data, with public exploit disclosure increasing the risk of active exploitation.

exploited Hotel and Tourism Reservation 1.0 web-vulnerability sql-injection cve data-compromise webserver

1r 3t 1c 1d ago