CVE-2026-86217

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is now public and may be used.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - cna@vuldb.com

Published

2026-09-06

Last modified

2026-09-11

Weaknesses

CWE-200, CWE-284

Affected products

• Hotel And Tourism Reservation In Php (Code-projects)

References

• https://code-projects.org/
• https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Hotel%20and%20Tourism%20Reservation%20System%20%E2%80%93%20Sensit…
• https://vuldb.com/cve/CVE-2026-86217
• https://vuldb.com/submit/897301
• https://vuldb.com/vuln/399355
• https://vuldb.com/vuln/399355/cti