{"id":"CVE-2026-14725","state":"PUBLISHED","title":"SourceCodester Online Boat Reservation System session expiration","description":"A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.","publishedAt":"2026-07-05T08:00:08.967Z","updatedAt":"2026-07-07T02:46:18.393Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Online Boat Reservation System"],"affected":[{"vendor":"SourceCodester","product":"Online Boat Reservation System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:online_boat_reservation_system:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/376311","https://vuldb.com/vuln/376311/cti","https://vuldb.com/cve/CVE-2026-14725","https://vuldb.com/submit/847674","https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7","https://www.sourcecodester.com/"],"weaknesses":["CWE-613"],"ingestedAt":"2026-10-29T20:11:00.674Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/14xxx/CVE-2026-14725.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-14725","state":"PUBLISHED","datePublished":"2026-07-05T08:00:08.967Z","dateUpdated":"2026-07-07T02:46:18.393Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-07-04T08:06:32.108Z"},"containers":{"cna":{"title":"SourceCodester Online Boat Reservation System session expiration","descriptions":[{"lang":"en","value":"A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used."}],"affected":[{"vendor":"SourceCodester","product":"Online Boat Reservation System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:online_boat_reservation_system:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/376311","name":"VDB-376311 | SourceCodester Online Boat Reservation System session expiration","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/376311/cti","name":"VDB-376311 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-14725","name":"CVE-2026-14725 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/847674","name":"Submit #847674 | SourceCodester Online Boat Reservation System 1.0 Improper Session Invalidation","tags":["third-party-advisory"]},{"url":"https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7","tags":["broken-link","exploit"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","type":"CWE","lang":"en","description":"Session Expiration"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-07-05T08:00:08.967Z"},"timeline":[{"time":"2026-07-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-07-04T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-07-04T10:11:36.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Hemant Raj Bhati (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-07T02:46:05.704992Z","id":"CVE-2026-14725","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-07T02:46:18.393Z"}}]}}}