CVE-2026-14762

Name of the Vulnerable Software and Affected Versions code-projects Hotel and Tourism Reservation version 1.0

Description An issue exists in the Room Management Page component within the file /admin/rooms.php. A remote attacker can perform a SQL injection—a technique used to manipulate a database by inserting malicious SQL code into a query—by manipulating the delete argument.

Recommendations Restrict access to the file /admin/rooms.php to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.