{"id":"CVE-2026-86217","title":"A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0","summary":"A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database Backup Handler. The manipulation results in information …","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-200","CWE-284"],"vendor":"code-projects","product":"Hotel and Tourism Reservation in PHP","affected":["hotel_and_tourism_reservation_in_php 1.0"],"published":"2026-09-06","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:37.720","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86217","references":[{"url":"https://code-projects.org/","label":"cna@vuldb.com"},{"url":"https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Hotel%20and%20Tourism%20Reservation%20System%20%E2%80%93%20Sensitive%20Information%20Disclosure%20via%20Exposed%20SQL%20Database%20File.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86217","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/897301","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399355","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399355/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-11T20:03:14.282872Z"},"epss":0.00311,"epssPercentile":0.24148,"ingestedAt":"2026-09-07T05:05:30.673Z","slug":"CVE-2026-86217","body":"## Overview\n\nA vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is now public and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202092,"id":"CVE-2026-86217","ts":1789400062419,"field":"exploit_available","old":"false","new":"true"},{"seq":200819,"id":"CVE-2026-86217","ts":1789397616418,"field":"exploit_available","old":"true","new":"false"},{"seq":199512,"id":"CVE-2026-86217","ts":1789395528957,"field":"exploit_available","old":"false","new":"true"},{"seq":198757,"id":"CVE-2026-86217","ts":1789392244129,"field":"exploit_available","old":"true","new":"false"},{"seq":197090,"id":"CVE-2026-86217","ts":1789384292451,"field":"exploit_available","old":"false","new":"true"},{"seq":196389,"id":"CVE-2026-86217","ts":1789383756663,"field":"exploit_available","old":"true","new":"false"},{"seq":195833,"id":"CVE-2026-86217","ts":1789380634568,"field":"exploit_available","old":"false","new":"true"},{"seq":194219,"id":"CVE-2026-86217","ts":1789378783085,"field":"exploit_available","old":"true","new":"false"},{"seq":193006,"id":"CVE-2026-86217","ts":1789376515130,"field":"exploit_available","old":"false","new":"true"},{"seq":191793,"id":"CVE-2026-86217","ts":1789373631115,"field":"exploit_available","old":"true","new":"false"},{"seq":190578,"id":"CVE-2026-86217","ts":1789369475721,"field":"exploit_available","old":"false","new":"true"},{"seq":189365,"id":"CVE-2026-86217","ts":1789368414430,"field":"exploit_available","old":"true","new":"false"},{"seq":188148,"id":"CVE-2026-86217","ts":1789365230817,"field":"exploit_available","old":"false","new":"true"},{"seq":186935,"id":"CVE-2026-86217","ts":1789363471281,"field":"exploit_available","old":"true","new":"false"},{"seq":185721,"id":"CVE-2026-86217","ts":1789361229178,"field":"exploit_available","old":"false","new":"true"},{"seq":184508,"id":"CVE-2026-86217","ts":1789358363750,"field":"exploit_available","old":"true","new":"false"},{"seq":182759,"id":"CVE-2026-86217","ts":1789354317201,"field":"exploit_available","old":"false","new":"true"},{"seq":181552,"id":"CVE-2026-86217","ts":1789353317699,"field":"exploit_available","old":"true","new":"false"},{"seq":180345,"id":"CVE-2026-86217","ts":1789350284759,"field":"exploit_available","old":"false","new":"true"},{"seq":179138,"id":"CVE-2026-86217","ts":1789348292877,"field":"exploit_available","old":"true","new":"false"},{"seq":177931,"id":"CVE-2026-86217","ts":1789346370065,"field":"exploit_available","old":"false","new":"true"},{"seq":176724,"id":"CVE-2026-86217","ts":1789343184528,"field":"exploit_available","old":"true","new":"false"},{"seq":174841,"id":"CVE-2026-86217","ts":1789334875743,"field":"exploit_available","old":"false","new":"true"},{"seq":173636,"id":"CVE-2026-86217","ts":1789333688332,"field":"exploit_available","old":"true","new":"false"},{"seq":172450,"id":"CVE-2026-86217","ts":1789331093063,"field":"exploit_available","old":"false","new":"true"},{"seq":171264,"id":"CVE-2026-86217","ts":1789328780892,"field":"exploit_available","old":"true","new":"false"},{"seq":170059,"id":"CVE-2026-86217","ts":1789327197206,"field":"exploit_available","old":"false","new":"true"},{"seq":168854,"id":"CVE-2026-86217","ts":1789323840089,"field":"exploit_available","old":"true","new":"false"},{"seq":167649,"id":"CVE-2026-86217","ts":1789319702623,"field":"exploit_available","old":"false","new":"true"},{"seq":166444,"id":"CVE-2026-86217","ts":1789318776141,"field":"exploit_available","old":"true","new":"false"},{"seq":165239,"id":"CVE-2026-86217","ts":1789315790370,"field":"exploit_available","old":"false","new":"true"},{"seq":164034,"id":"CVE-2026-86217","ts":1789313634282,"field":"exploit_available","old":"true","new":"false"},{"seq":162829,"id":"CVE-2026-86217","ts":1789311903490,"field":"exploit_available","old":"false","new":"true"},{"seq":161624,"id":"CVE-2026-86217","ts":1789308733212,"field":"exploit_available","old":"true","new":"false"},{"seq":159737,"id":"CVE-2026-86217","ts":1789300470607,"field":"exploit_available","old":"false","new":"true"},{"seq":158839,"id":"CVE-2026-86217","ts":1789299572048,"field":"exploit_available","old":"true","new":"false"},{"seq":158299,"id":"CVE-2026-86217","ts":1789296693108,"field":"exploit_available","old":"false","new":"true"},{"seq":156726,"id":"CVE-2026-86217","ts":1789294755671,"field":"exploit_available","old":"true","new":"false"},{"seq":155521,"id":"CVE-2026-86217","ts":1789292967984,"field":"exploit_available","old":"false","new":"true"},{"seq":154316,"id":"CVE-2026-86217","ts":1789289797600,"field":"exploit_available","old":"true","new":"false"},{"seq":151567,"id":"CVE-2026-86217","ts":1789277629908,"field":"exploit_available","old":"false","new":"true"},{"seq":150528,"id":"CVE-2026-86217","ts":1789276245649,"field":"exploit_available","old":"true","new":"false"},{"seq":149495,"id":"CVE-2026-86217","ts":1789273824761,"field":"exploit_available","old":"false","new":"true"},{"seq":148462,"id":"CVE-2026-86217","ts":1789271348756,"field":"exploit_available","old":"true","new":"false"},{"seq":146493,"id":"CVE-2026-86217","ts":1789269398080,"field":"exploit_available","old":"false","new":"true"},{"seq":145298,"id":"CVE-2026-86217","ts":1789266339666,"field":"exploit_available","old":"true","new":"false"},{"seq":144202,"id":"CVE-2026-86217","ts":1789262616791,"field":"exploit_available","old":"false","new":"true"},{"seq":143106,"id":"CVE-2026-86217","ts":1789261533444,"field":"exploit_available","old":"true","new":"false"},{"seq":141937,"id":"CVE-2026-86217","ts":1789258831823,"field":"exploit_available","old":"false","new":"true"},{"seq":140778,"id":"CVE-2026-86217","ts":1789256727159,"field":"exploit_available","old":"true","new":"false"}]}