CVE-2026-3771: SourceCodester/janobe Resort Reservation System accomodation.php sql injection

Published Mar 8, 2026

Updated

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

github/sourcecodester/janobe-resort-reservation-system

oretnom23 Resort Reservation System=1.0

Event History

Mar 8, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Jul 22, 58183

Event

via NVD·12:12 AM

Frequently Asked Questions

What is the severity of CVE-2026-3771?

CVE-2026-3771 has a critical severity rating due to the potential for SQL injection vulnerabilities.

How do I fix CVE-2026-3771?

To fix CVE-2026-3771, sanitize all user inputs in the accomodation.php file to prevent SQL injection.

What does CVE-2026-3771 affect?

CVE-2026-3771 affects the SourceCodester/janobe Resort Reservation System version 1.0 specifically targeting the accomodation.php file.

What type of vulnerability is CVE-2026-3771?

CVE-2026-3771 is classified as an SQL injection vulnerability.

Can CVE-2026-3771 be exploited remotely?

Yes, CVE-2026-3771 can be exploited remotely if the application is accessible over the internet.