Vulnerability · Published Jul 5, 2026 · Assigned by VulDB
CVE-2026-14725SourceCodester Online Boat Reservation System session expiration
Medium 6.3
In plain English
A medium-severity security flaw in Online Boat Reservation System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.4%top 69.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Boat Reservation System | 1.0 |
Weakness: CWE-613 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-376311 | SourceCodester Online Boat Reservation System session expiration vdb-entry
- VDB-376311 | CTI Indicators (IOB, IOC) signature, permissions-required
- CVE-2026-14725 | CVE Analysis and Report third-party-advisory
- Submit #847674 | SourceCodester Online Boat Reservation System 1.0 Improper Session Invalidation third-party-advisory
- https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7 broken-link, exploit
- https://www.sourcecodester.com/ product