CVE-2026-14755

Name of the Vulnerable Software and Affected Versions Hotel and Tourism Reservation version 1.0

Description An issue exists in the Reservations Management Page within the file /admin/reservations.php. A remote attacker can perform a SQL injection, which is a technique used to manipulate a database by inserting malicious SQL code into a query, by manipulating the delete argument.

Recommendations Update Hotel and Tourism Reservation version 1.0 to a patched version. As a temporary mitigation, restrict access to the /admin/reservations.php endpoint or avoid using the delete argument until the patch is applied.