CVE-2026-10290High· 7.3▾ MidnightPoC availableA weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument t…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
1 GitHub repo
A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11342Medium· 4.7A weakness has been identified in code-projects Online Course Registration 1.0
CVE-2025-11343High· 7.3A security vulnerability has been detected in code-projects Student Crud Operation 3.3
CVE-2025-11431Medium· 6.3A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0
CVE-2025-10841High· 7.3A security vulnerability has been detected in code-projects Online Bidding System 1.0
CVE-2025-10842High· 7.3A vulnerability was detected in code-projects Online Bidding System 1.0
CVE-2025-10813High· 7.3A vulnerability was found in code-projects Hostel Management System 1.0