Medium severity5.3NVD Advisory· Published Sep 6, 2026· Updated Sep 11, 2026
CVE-2026-86217
CVE-2026-86217
Description
A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is now public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0
Patches
Vulnerability mechanics
References
6- code-projects.orgnvd
- github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Hotel%20and%20Tourism%20Reservation%20System%20%E2%80%93%20Sensitive%20Information%20Disclosure%20via%20Exposed%20SQL%20Database%20File.mdnvd
- vuldb.com/cve/CVE-2026-86217nvd
- vuldb.com/submit/897301nvd
- vuldb.com/vuln/399355nvd
- vuldb.com/vuln/399355/ctinvd
News mentions
1- Code Projects: 19 Vulnerabilities Including SQLi and Info Disclosure Disclosed TogetherVypr Intelligence · Sep 8, 2026