| Title | code-projects Hotel and Tourism Reservation in PHP 1.0 Information Disclosure |
|---|
| Description | The Hotel and Tourism Reservation System in PHP contains a potential Sensitive Information Disclosure vulnerability due to an SQL database file being accessible from within the application's web directory.
The affected database resource is named:
hotel_db (1).sql
and is accessible using the URL-encoded path:
/ht/hotel_db%20(1).sql
Database initialization files and database backups commonly contain SQL statements used to create application tables and populate them with data. These resources should not be accessible through the public web server.
If the hotel_db (1).sql file is located under the application's publicly accessible /ht/ directory and the web server does not explicitly restrict requests for .sql files, an unauthenticated remote user can potentially request the resource directly.
The attack does not require exploitation of the application's normal reservation functionality. Instead, the attacker sends a direct HTTP GET request for the predictable database filename.
If the server responds with the SQL file, the attacker can obtain information contained within the database dump.
Depending on the contents of the exposed file, disclosed information may include:
Database table names
Database column names
Application database structure
User account records
Administrative account information
Hotel information
Room information
Reservation records
Customer information
Contact information
Tour information
Other records contained in the database dump
Even when an SQL file contains only the initial application schema and demonstration data, disclosure of the complete database structure provides an attacker with detailed knowledge of the application's backend implementation.
This information can reveal table relationships, authentication-related fields, administrative data structures, and other implementation details that may assist in identifying or exploiting additional application vulnerabilities.
If the SQL file contains credentials, password hashes, plaintext passwords, personal information, or real reservation data, the confidentiality impact is substantially higher.
The root cause is insecure placement of a database resource inside a publicly accessible web directory combined with insufficient web-server access restrictions.
|
|---|
| Source | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Hotel%20and%20Tourism%20Reservation%20System%20%E2%80%93%20Sensitive%20Information%20Disclosure%20via%20Exposed%20SQL%20Database%20File.md |
|---|
| User | AhmadMarzouk (UID 95993) |
|---|
| Submission | 07/20/2026 12:34 (2 months ago) |
|---|
| Moderation | 09/05/2026 21:07 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 399355 [code-projects Hotel and Tourism Reservation in PHP 1.0 Database Backup /ht/hotel_db%20(1).sql information disclosure] |
|---|
| Points | 20 |
|---|