CVE-2026-14688: itsourcecode Online Hotel Management System login.php sql injection
A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14688?
CVE-2026-14688 has a severity rating of high with a score of 7.3.
How do I fix CVE-2026-14688?
To fix CVE-2026-14688, update to a patched version of the itsourcecode Online Hotel Management System that addresses the SQL injection vulnerability.
What type of vulnerability is CVE-2026-14688?
CVE-2026-14688 is classified as an SQL Injection vulnerability.
Can CVE-2026-14688 be exploited remotely?
Yes, CVE-2026-14688 can be exploited remotely due to the nature of the vulnerability.
What components are affected by CVE-2026-14688?
CVE-2026-14688 affects the login.php file of the itsourcecode Online Hotel Management System.