# Code-Projects Hotel and Tourism Reservation System vulnerabilities

Source: https://junglewise.ai/threats/technologies/hotel-and-tourism-reservation-system  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/hotel-and-tourism-reservation-system.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 10 vulnerabilities in Code-Projects Hotel and Tourism Reservation System: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-14764, was published on 5 July 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 10 (0 critical, 0 exploited in the wild)

## About Code-Projects Hotel and Tourism Reservation System

Hotel and Tourism Reservation System is a web-based application for managing hotel bookings and tourism services.

## Latest Code-Projects Hotel and Tourism Reservation System vulnerabilities

- [CVE-2026-14764: code-projects Hotel and Tourism Reservation SQL injection in add_event.php](https://junglewise.ai/threats/cve-2026-14764-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14763: code-projects Hotel and Tourism Reservation SQL injection in tour_reserves.php](https://junglewise.ai/threats/cve-2026-14763-code-projects-hotel-and-tourism-reservation-sql-injection-in-tour) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14762: code-projects Hotel and Tourism Reservation SQL injection in rooms.php](https://junglewise.ai/threats/cve-2026-14762-code-projects-hotel-and-tourism-reservation-sql-injection-in) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14756: code-projects Hotel and Tourism Reservation SQL injection in add_tour.php](https://junglewise.ai/threats/cve-2026-14756-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14755: code-projects Hotel and Tourism Reservation SQL injection in reservations.php](https://junglewise.ai/threats/cve-2026-14755-code-projects-hotel-and-tourism-reservation-sql-injection-in) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14754: code-projects Hotel and Tourism Reservation SQL injection in add_room.php](https://junglewise.ai/threats/cve-2026-14754-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-11342: code-projects Hotel and Tourism Reservation System SQL injection in details.php](https://junglewise.ai/threats/cve-2026-11342-code-projects-hotel-and-tourism-reservation-system-sql-injection) (high, CVSS 7.3, published 5 Jun 2026)
- [CVE-2026-10290: code-projects Hotel and Tourism Reservation System SQL injection in tour.php](https://junglewise.ai/threats/cve-2026-10290-code-projects-hotel-and-tourism-reservation-system-sql-injection) (high, CVSS 7.3, published 1 Jun 2026)
- [CVE-2026-10289: code-projects Hotel and Tourism Reservation System stored XSS in tour.php](https://junglewise.ai/threats/cve-2026-10289-code-projects-hotel-and-tourism-reservation-system-stored-xss-in) (medium, CVSS 4.3, published 1 Jun 2026)
- [CVE-2026-10288: code-projects Hotel and Tourism Reservation System authentication bypass in Admin Login](https://junglewise.ai/threats/cve-2026-10288-code-projects-hotel-and-tourism-reservation-system-authentication) (high, CVSS 7.3, published 1 Jun 2026)

## Most severe Code-Projects Hotel and Tourism Reservation System vulnerabilities

- [CVE-2026-14764: code-projects Hotel and Tourism Reservation SQL injection in add_event.php](https://junglewise.ai/threats/cve-2026-14764-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14763: code-projects Hotel and Tourism Reservation SQL injection in tour_reserves.php](https://junglewise.ai/threats/cve-2026-14763-code-projects-hotel-and-tourism-reservation-sql-injection-in-tour) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14762: code-projects Hotel and Tourism Reservation SQL injection in rooms.php](https://junglewise.ai/threats/cve-2026-14762-code-projects-hotel-and-tourism-reservation-sql-injection-in) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14756: code-projects Hotel and Tourism Reservation SQL injection in add_tour.php](https://junglewise.ai/threats/cve-2026-14756-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14755: code-projects Hotel and Tourism Reservation SQL injection in reservations.php](https://junglewise.ai/threats/cve-2026-14755-code-projects-hotel-and-tourism-reservation-sql-injection-in) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-14754: code-projects Hotel and Tourism Reservation SQL injection in add_room.php](https://junglewise.ai/threats/cve-2026-14754-code-projects-hotel-and-tourism-reservation-sql-injection-in-add) (high, CVSS 7.3, published 5 Jul 2026)
- [CVE-2026-11342: code-projects Hotel and Tourism Reservation System SQL injection in details.php](https://junglewise.ai/threats/cve-2026-11342-code-projects-hotel-and-tourism-reservation-system-sql-injection) (high, CVSS 7.3, published 5 Jun 2026)
- [CVE-2026-10290: code-projects Hotel and Tourism Reservation System SQL injection in tour.php](https://junglewise.ai/threats/cve-2026-10290-code-projects-hotel-and-tourism-reservation-system-sql-injection) (high, CVSS 7.3, published 1 Jun 2026)
- [CVE-2026-10288: code-projects Hotel and Tourism Reservation System authentication bypass in Admin Login](https://junglewise.ai/threats/cve-2026-10288-code-projects-hotel-and-tourism-reservation-system-authentication) (high, CVSS 7.3, published 1 Jun 2026)
- [CVE-2026-10289: code-projects Hotel and Tourism Reservation System stored XSS in tour.php](https://junglewise.ai/threats/cve-2026-10289-code-projects-hotel-and-tourism-reservation-system-stored-xss-in) (medium, CVSS 4.3, published 1 Jun 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Code-Projects technologies

- [Code-Projects Employee Management System](https://junglewise.ai/threats/technologies/employee-management-system): 11 vulnerabilities
- [Code-Projects Simple Laundry System](https://junglewise.ai/threats/technologies/simple-laundry-system): 11 vulnerabilities
- [Code-Projects Real State Services](https://junglewise.ai/threats/technologies/real-state-services): 9 vulnerabilities
- [Code-Projects Hospital Information System](https://junglewise.ai/threats/technologies/hospital-information-system): 5 vulnerabilities
- [Code-Projects Internship Management System](https://junglewise.ai/threats/technologies/internship-management-system): 5 vulnerabilities
- [Code-Projects Online Music Site](https://junglewise.ai/threats/technologies/online-music-site): 5 vulnerabilities
- [Code-Projects Simple IT Discussion Forum](https://junglewise.ai/threats/technologies/simple-it-discussion-forum): 5 vulnerabilities
- [Code-Projects Assessment Management System](https://junglewise.ai/threats/technologies/assessment-management-system): 4 vulnerabilities
- [Code-Projects Matrimonial System](https://junglewise.ai/threats/technologies/matrimonial-system): 4 vulnerabilities
- [Code-Projects Online Hospital Management System](https://junglewise.ai/threats/technologies/online-hospital-management-system): 4 vulnerabilities
- [Code-Projects Online Job Portal](https://junglewise.ai/threats/technologies/online-job-portal): 4 vulnerabilities
- [Code-Projects Online Shopping System](https://junglewise.ai/threats/technologies/online-shopping-system): 4 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Code-Projects Hotel and Tourism Reservation System vulnerabilities", https://junglewise.ai/threats/technologies/hotel-and-tourism-reservation-system, 9 November 2026.
