Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
Simple Responsive Tourism Website Login Data Exposed to Unauthorized Access
CVE-2026-3746
Summary
A security issue in the Simple Responsive Tourism Website's login system allows attackers to potentially access sensitive data. This is a concern because it could be exploited by hackers to gain unauthorized access to user information. To protect your website, update the Login.php file to prevent SQL injection attacks.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| oretnom23 | simple_responsive_tourism_website | 1.0 | – |
Original title
A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of ...
Original description
A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
nvd CVSS2.0
7.5
nvd CVSS3.1
7.3
nvd CVSS4.0
6.9
Vulnerability type
CWE-74
Injection
CWE-89
SQL Injection
Published: 8 Mar 2026 · Updated: 13 Mar 2026 · First seen: 8 Mar 2026