CVE-2026-3800: SourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted upload
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3800?
CVE-2026-3800 has been classified as a high severity vulnerability due to its potential to allow unrestricted file uploads.
How do I fix CVE-2026-3800?
To fix CVE-2026-3800, implement proper file type and size validation on uploaded images in the doInsert function.
What type of attack is associated with CVE-2026-3800?
CVE-2026-3800 is susceptible to remote code execution attacks due to uncontrolled file uploads.
Which versions of the SourceCodester/janobe Resort Reservation System are affected by CVE-2026-3800?
CVE-2026-3800 affects version 1.0 of the SourceCodester/janobe Resort Reservation System.
Where can I find more information about CVE-2026-3800?
More details regarding CVE-2026-3800 can typically be found in security advisories and vulnerability databases.