Beveiligingsadvies

CVE-2026-14754

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-05 14:00:08
Laatst bijgewerkt 2026-07-06 17:43:45
Toegewezen door VulDB
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of the argument delete_image/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.